An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.
| Vendor | Product | Versions |
|---|---|---|
| juniper | junos os | 25.2, 25.4, 26.2, 25.2, 25.4, 26.2, 23.4X100, 25.2X100, 25.4X300 |
Loading…
