What is CVE-2023-28983?

CVE-2023-28983 is a high-severity vulnerability in Juniper Junos OS Evolved, classified under OS Command Injection. CVSS score: 8.8/10. Published 2023-04-17.

How severe is CVE-2023-28983?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in Juniper Junos OS Evolved

CVE-2023-28983

An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4 version 21.4R1-EVO and later versions prior to 22.1R1-EVO.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Juniper Junos_os_evolved — versions 21.4
Juniper Networks Junos Os Evolved — versions 21.4R1-EVO, 22.1

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

sirt@juniper.net (Vendor Advisory)

Frequently asked questions

What is CVE-2023-28983?: CVE-2023-28983 is a high-severity vulnerability in Juniper Junos OS Evolved, classified under OS Command Injection. CVSS score: 8.8/10. Published 2023-04-17.
How severe is CVE-2023-28983?: High severity. CVSS v3 base score is 8.8 out of 10.