AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-39546

HIGH · CVSS 7.3 EPSS 0.18%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-07-11 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.3. See the original NVD description below for full technical details.

CVE
CVE-2024-39546
Severity
HIGH
CVSS
7.3
EPSS
0.18%

Original NVD Description

A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local attacker to modify certain files, allowing the attacker to cause any command to execute with root privileges leading to privilege escalation ultimately compromising the system.  This issue affects Junos OS Evolved:  * All versions prior to 21.2R3-S8-EVO,  * 21.4 versions prior to  21.4R3-S6-EVO,  * 22.1 versions prior to 22.1R3-S5-EVO,  * 22.2 versions prior to 22.2R3-S3-EVO,  * 22.3 versions prior to 22.3R3-S3-EVO,  * 22.4 versions prior to 22.4R3-EVO,  * 23.2 versions prior to 23.2R2-EVO.

Related CVEs

Other vulnerabilities affecting the same vendor(s)