An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the [system scripts commit] stanza. Certain commit scripts that work without a
An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the [system scripts commit] stanza. Certain commit scripts that work without a problem during normal commit may cause unexpected behavior upon reboot which can leave the system in a state where root…
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS | 12.1X46, 12.3X48, 15.1X49 |
| Juniper Networks | Junos OS | 14.1, 14.2, 15.1, 16.1 |
| Juniper Networks | Junos OS | 14.1X53 |
| Juniper Networks | Junos OS | 15.1X53 |
| Juniper Networks | Junos OS | 15.1X53 |
| Juniper Networks | Junos OS | 15.1X53 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.