CVE-2023-28966 json
Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root
published 2023-04-17 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-32584
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 5%
- public exploits
- 0
- none known
Summary
An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute commands as root. The issue is caused by improper file and directory permissions on certain system files, allowing an attacker with access to these files and folders to inject CLI commands as root. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S5-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO.
Patch / fix
- Juniper Networks Junos OS Evolved 20.4R3-S5-EVO, 21.2R3-EVO, 21.3R2-EVO
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 21 mo ago
Exploit prediction
0.16% chance of exploitation in the next 30 days, higher than 5% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Juniper Networks Junos OS Evolved
Classification
- Weakness
-
- CWE-276 Incorrect Default Permissions
References
-
supportportal.juniper.net
/JSA70590
vendor-advisory
Sources
- CVE List CVE-2023-28966
- NVD CVE-2023-28966
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.