Skip to content
OpenAdvisories
High · 7.8 CVE-2022-22251 EUVD-2022-27398GHSA-hrjj-p4r3-74mg

cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges

Published Oct 18, 2022 · Updated May 8, 2025 · Assigned by juniper

Description

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS 20.2R1 – < 20.2*, 20.3R1 – < 20.3*, 20.4R1 – < 20.4*, 21.1R1 – < 21.1* 20.2*

References