High severity8.8NVD Advisory· Published Apr 17, 2023· Updated Jun 17, 2026
CVE-2023-28983
CVE-2023-28983
Description
An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4 version 21.4R1-EVO and later versions prior to 22.1R1-EVO.
Affected products
13cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*+ 12 more
- cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*
- (no CPE)range: 21.4R1-EVO - 22.1R1-EVO
- (no CPE)range: 21.4R1-EVO
Patches
Vulnerability mechanics
References
1- supportportal.juniper.net/JSA70609nvdVendor Advisory
News mentions
0No linked articles in our index yet.