« Volver al listado

CVE-2024-30406

Estado: AnalizadaMedia (6.7)—

A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials.

This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO.

This issue does not affect releases before 23.1R1-EVO.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Juniper — Junos OS EvolvedJuniper — Paragon Active Assurance Test Agent

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-30406",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-30406",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-12T17:46:38.908028Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4,
        "exploitabilityScore": 1.1
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 6.7,
          "Automatable": "NOT_DEFINED",
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "PASSIVE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "HIGH",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS Evolved",
          "versions": [
            {
              "status": "affected",
              "version": "23.1R1-EVO",
              "versionType": "semver",
              "lessThanOrEqual": "23.2R2-EVO"
            }
          ],
          "platforms": [
            "Paragon Active Assurance Test Agent",
            "ACX Series"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-04-12T15:15:25.340",
  "references": [
    {
      "url": "https://supportportal.juniper.net/JSA79104",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/services-paa-test-agent.html",
      "tags": [
        "Technical Description"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade-evo/topics/topic-map/paa-test-agent-install.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://supportportal.juniper.net/JSA79104",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/services-paa-test-agent.html",
      "tags": [
        "Technical Description"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade-evo/topics/topic-map/paa-test-agent-install.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sirt@juniper.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-313"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials.\n\nThis issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO. \n\nThis issue does not affect releases before 23.1R1-EVO."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de almacenamiento de texto plano en un archivo en disco en dispositivos Juniper Networks Junos OS Evolved ACX Series que utilizan el software Paragon Active Assurance Test Agent instalado en dispositivos de red permite a un atacante local autenticado con altos privilegios leer las credenciales de inicio de sesión de todos los demás usuarios. Este problema afecta solo a los dispositivos Juniper Networks Junos OS Evolved ACX Series que utilizan el software Paragon Active Assurance Test Agent instalado en estos dispositivos desde 23.1R1-EVO hasta 23.2R2-EVO. Este problema no afecta a las versiones anteriores a 23.1R1-EVO."
    }
  ],
  "lastModified": "2026-06-17T07:26:54.560",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:juniper:paragon_active_assurance_test_agent:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E66B1E3C-49A7-4049-A4CC-EC41672965D6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57477D7B-F7BB-4491-B545-C770B1160F01"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82A4E4C8-2D50-4675-8A96-8C9DADCE46CF"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54B79847-EBC1-480E-87BE-60D411C93FC6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8135057E-D346-4925-96BA-FE22C7C03903"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DEAA7FD-385F-4221-907E-65ABC16BE4BE"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDEC008A-3137-48D1-8ABC-6DB0EFC40E50"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "558D234D-BC50-415F-86D6-8E19D6C3ACE0"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33F4EEEE-77E9-4973-A770-99E7BA2F05F5"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:acx5448:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2EB7B849-D1D4-46F3-B502-5D84C5E7C3B0"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx5448-d:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "44A836E7-B70D-4786-B4BB-BBD6C89057E6"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx5448-m:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7F135CB4-1E4F-40CD-8E43-BAD1D6EF3F94"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx7020:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B2E5B843-629D-43D7-A4EE-EFA658109B25"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx7024:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1026737F-BA23-4550-9030-EA0502E97953"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx7024x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2FFFD74C-7BF9-4EAF-B364-356A8393712D"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx710:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AC3484A2-C7E4-43D1-9D47-08C531185C67"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx7100:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CFED6AC1-B3C0-44EC-AF40-E61CF1EE94E0"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx7300:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8977D7A0-C498-4DC2-9A2C-A58D900386F3"
            },
            {
              "criteria": "cpe:2.3:h:juniper:acx7509:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B50EC358-F551-4F2B-9DA1-61B6412AB957"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}