Vulnerability in Juniper Acx5448
CVE-2024-30406
A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials. This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO. This issue does not affect releases before 23.1R1-EVO.
EPSS: 0.001 (3.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- sirt@juniper.net (vendor-advisory, Vendor Advisory)
- sirt@juniper.net (product, Third Party Advisory)
- sirt@juniper.net (Technical Description, product)
- sirt@juniper.net (technical-description, Vendor Advisory)
Frequently asked questions
- What is CVE-2024-30406?
- CVE-2024-30406 is a medium-severity vulnerability in Juniper Acx5448, classified under Cleartext Storage in a File or on Disk. CVSS score: 5.5/10. Published 2024-04-12.
- How severe is CVE-2024-30406?
- Medium severity. CVSS v3 base score is 5.5 out of 10.
- Is CVE-2024-30406 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.