Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable (Juniper Networks Junos OS)
En bref
- Source
- NVD
- EPSS
- EPSS 0.13 % · centile 3 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- juniper
- Statut NVD
- Analyzed
Description
An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to write to the Unix socket used to manage the jdhcpd process, resulting in complete control over the resource. This vulnerability allows any low-privileged user logged into the system to connect to the Unix socket and issue commands to manage the DHCP service, in essence, taking administrative control of the local DHCP server or DHCP relay. This issue affects: Junos OS: * all versions before 21.2R3-S10, * all versions of 22.2, * from 21.4 before 21.4R3-S12, * from 22.4 before 22.4R3-S8, * from 23.2 before 23.2R2-S5, * from 23.4 before 23.4R2-S6, * from 24.2 before 24.2R2-S2, * from 24.4 before 24.4R2, * from 25.2 before 25.2R1-S1, 25.2R2; Junos OS Evolved: * all versions before 22.4R3-S8-EVO, * from 23.2 before 23.2R2-S5-EVO, * from 23.4 before 23.4R2-S6-EVO, * from 24.2 before 24.2R2-S2-EVO, * from 24.4 before 24.4R2-EVO, * from 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO.
Faiblesses (CWE)
- CWE-732 — Attribution de permissions incorrecte sur une ressource critique
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | juniper |
| CVSS 4.0 | MEDIUM 6.8 | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:L/AU:Y/R:A/V:C/RE:M/U:Green | juniper |
| CVSS 4.0 | MEDIUM 6.8 | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Green | NVD · sirt@juniper.net (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | NVD · sirt@juniper.net (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-2702
- GCVE · GCVE-0-2025-59961
Avis du CERT-FR
- CERTFR-2026-AVI-0050 — Multiples vulnérabilités dans les produits Juniper Networks · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*< 21.2cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s7:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s8:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.2:r3-s9:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s10:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s11:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s7:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s8:*:*:*:*:*:*cpe:2.3:o:juniper:junos:21.4:r3-s9:*:*:*:*:*:*cpe:2.3:o:juniper:junos:22.2:*:*:*:*:*:*:*cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*- +92 autres
Produits affectés
| Produit | Versions |
|---|---|
| Juniper Networks · Junos OS | affected 0 < 21.2R3-S10 ; affected 21.4 < 21.4R3-S12 ; affected 22.2 < 22.2* ; affected 22.4 < 22.4R3-S8 ; affected 23.2 < 23.2R2-S5 ; affected 23.4 < 23.4R2-S6 |
| Juniper Networks · Junos OS Evolved | affected 0 < 22.4R3-S8-EVO ; affected 23.2 < 23.2R2-S5-EVO ; affected 23.4 < 23.4R2-S6-EVO ; affected 24.2 < 24.2R2-S2-EVO ; affected 24.4 < 24.4R2-EVO ; affected 25.2 < 25.2R1-S1-EVO, 25.2R2-EVO |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |