Monday, July 22, 2024

Juniper Releases Out-Of-Cycle Critical Update for Smart Routers

Juniper Networks has released an out-of-cycle critical update to address a severe vulnerability affecting its Session Smart Router, Session Smart Conductor, and WAN Assurance Router products.

The security flaw, identified as CVE-2024-2973, allows network-based attackers to bypass authentication and gain full control of the affected devices.

This vulnerability is particularly concerning due to its high severity, with a CVSS score of 10.0 under both CVSS 3.1 and CVSS 4.0 metrics, indicating the maximum level of risk.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

Products Affected

The vulnerability impacts the following products:

  • Session Smart Router: All versions before 5.6.15, versions from 6.0 before 6.1.9-lts, and versions from 6.2 before 6.2.5-sts.
  • Session Smart Conductor: All versions before 5.6.15, versions from 6.0 before 6.1.9-lts, and versions from 6.2 before 6.2.5-sts.
  • WAN Assurance Router: Versions 6.0 before 6.1.9-lts and versions 6.2 before 6.2.5-sts.

The vulnerability is classified as critical because it could allow attackers to bypass authentication and take complete control of the device.

This issue specifically affects routers and conductors operating in high-availability redundant configurations, which are commonly used in mission-critical network infrastructures such as large enterprises, data centers, telecommunications, and government services.

Juniper Networks has released updates to mitigate this vulnerability. The fixed versions are:

  • Session Smart Router: SSR-5.6.15, SSR-6.1.9-lts, SSR-6.2.5-sts, and subsequent releases.
  • Session Smart Conductor: Same versions as the Session Smart Router.
  • WAN Assurance Router: Automatically patched when connected to the Mist Cloud.

Administrators are advised to upgrade to these versions to secure their systems. In Conductor-managed deployments, upgrading the Conductor nodes will automatically apply the fix to all connected routers.

However, upgrading the routers to the fixed versions is still recommended to ensure complete protection.

Juniper’s Security Incident Response Team (SIRT) has not observed any malicious exploitation of this vulnerability. The issue was discovered during internal security testing and research.

There are no known workarounds for this issue. The only recommended action is to apply the available updates.

The fix’s application is designed to be non-disruptive to production traffic, with only a brief downtime (less than 30 seconds) for web-based management and APIs.

Juniper Networks’ prompt response to this critical vulnerability underscores the importance of maintaining updated security measures in network infrastructure.

Administrators should prioritize applying these updates to protect their systems from potential exploitation.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files


Latest articles

SonicOS IPSec VPN Vulnerability Let Attackers Cause Dos Condition

SonicWall has disclosed a critical heap-based buffer overflow vulnerability in its SonicOS IPSec VPN....

Hackers Registered 500k+ Domains Using Algorithms For Extensive Cyber Attack

Hackers often register new domains for phishing attacks, spreading malware, and other deceitful activities. Such...

Hackers Claim Breach of Daikin: 40 GB of Confidential Data Exposed

Daikin, the world's largest air conditioner manufacturer, has become the latest target of the...

Emojis Are To Express Emotions, But CyberCriminals For Attacks

There are 3,664 emojis that can be used to express emotions, ideas, or objects...

Beware Of Fake Browser Updates That Installs Malicious BOINC Infrastructre

SocGholish malware, also known as FakeUpdates, has exhibited new behavior since July 4th, 2024,...

Data Breach Increases by Over 1,000% Annually

The Identity Theft Resource Center® (ITRC), a nationally recognized nonprofit organization established to support...

UK Police Arrested 17-year-old Boy Responsible for MGM Resorts Hack

UK police have arrested a 17-year-old boy from Walsall in connection with a notorious...
Guru baran
Guru baran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles