Skip to content
OpenAdvisories

Product · Juniper Networks

Session Smart Conductor

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-103406

    Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

    An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.

    Juniper Networks Session Smart Conductor Network devices
  • Critical 9.8
    CVE-2025-21589

    Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability

    An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass authentication and take administrative control of the device. This issue affects Session Smart Rou…

    Juniper Networks Session Smart Router Session Smart Conductor WAN Assurance Managed Router Network devices
  • Critical 10.0
    CVE-2024-2973

    Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed

    An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only ro…

    Juniper Networks Session Smart Router Session Smart Conductor WAN Assurance Router Network devices