VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 17, 2023· Updated Jun 17, 2026

CVE-2023-28966

CVE-2023-28966

Description

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute commands as root. The issue is caused by improper file and directory permissions on certain system files, allowing an attacker with access to these files and folders to inject CLI commands as root. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S5-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO.

Affected products

26
  • Juniper Networks/OS Evolved26 versions
    cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*+ 25 more
    • cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*range: <20.4
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*
    • (no CPE)range: <20.4R3-S5-EVO, <21.2R3-EVO, <21.3R2-EVO
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.