Vulnerabilityhigh

High-Severity Flaws in Juniper Junos OS Affect Enterprise Networking Devices

The Hacker Newsby @TheHackersNewsOct 28, 2022 · 14:33 UTC (Oct 28, 2022)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-22241 CVE-2022-22242 CVE-2022-22243 CVE-2022-22244 CVE-2022-22245 CVE-2022-30333 CVE-2022-22246

Tags: cve-2022-22241 cve-2022-22242 cve-2022-22243 cve-2022-22244 cve-2022-22245 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22241 +5 related CVEs CVE-2022-22246 CVE-2022-22242 CVE-2022-22244 CVE-2022-22245 CVE-2022-22243	An Improper Input Validation vulnerability in the J-Web component of Juniper Networks Junos OS may allow an unauthenticated attacker to access data without…	9.8 group max	1%		Oct 18, 2022
CVE-2022-30333	Directory Traversal in RARLAB UnRAR (Linux/UNIX) Enables Arbitrary File Writes	7.5	99%	KEVRansomwarePoC ×2	May 9, 2022 KEV Aug 9, 2022

From the original article

2 min read at thehackernews.com

Multiple high-severity security flaws have been disclosed as affecting Juniper Networks devices, some of which could be exploited to achieve code execution. Chief among them is a remote pre-authenticated PHP archive file deserialization vulnerability (CVE-2022-22241, CVSS score: 8. 1) in the J-Web component of Junos OS, according to Octagon Networks researcher Paulos Yibelo.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.