- Vendor / Project
- Juniper
- Product
- Junos OS
- Date added
- Mar 25, 2022
- Due date
- Apr 15, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-22, CWE-73
Description
A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.
Required action
Apply updates per vendor instructions.