CVE-2023-44187

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system.

This issue affects Juniper Networks Junos OS Evolved:
  *  All versions prior to 20.4R3-S7-EVO;
  *  21.1 versions 21.1R1-EVO and later;
  *  21.2 versions prior to 21.2R3-S5-EVO;
  *  21.3 versions prior to 21.3R3-S4-EVO;
  *  21.4 versions prior to 21.4R3-S4-EVO;
  *  22.1 versions prior to 22.1R3-S2-EVO;
  *  22.2 versions prior to 22.2R2-EVO.


ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
juniperCNA
5.9 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
VendorProductVersion
juniperjunos_os_evolved
𝑥
< 20.4
juniperjunos_os_evolved
20.4
juniperjunos_os_evolved
20.4:r1
juniperjunos_os_evolved
20.4:r1-s1
juniperjunos_os_evolved
20.4:r1-s2
juniperjunos_os_evolved
20.4:r2
juniperjunos_os_evolved
20.4:r2-s1
juniperjunos_os_evolved
20.4:r2-s2
juniperjunos_os_evolved
20.4:r2-s3
juniperjunos_os_evolved
20.4:r3
juniperjunos_os_evolved
20.4:r3-s1
juniperjunos_os_evolved
20.4:r3-s2
juniperjunos_os_evolved
20.4:r3-s3
juniperjunos_os_evolved
20.4:r3-s4
juniperjunos_os_evolved
20.4:r3-s5
juniperjunos_os_evolved
20.4:r3-s6
juniperjunos_os_evolved
21.1
juniperjunos_os_evolved
21.1:r1
juniperjunos_os_evolved
21.1:r1-s1
juniperjunos_os_evolved
21.1:r2
juniperjunos_os_evolved
21.1:r3
juniperjunos_os_evolved
21.1:r3-s1
juniperjunos_os_evolved
21.1:r3-s2
juniperjunos_os_evolved
21.1:r3-s3
juniperjunos_os_evolved
21.2
juniperjunos_os_evolved
21.2:r1
juniperjunos_os_evolved
21.2:r1-s1
juniperjunos_os_evolved
21.2:r1-s2
juniperjunos_os_evolved
21.2:r2
juniperjunos_os_evolved
21.2:r2-s1
juniperjunos_os_evolved
21.2:r2-s2
juniperjunos_os_evolved
21.2:r3
juniperjunos_os_evolved
21.2:r3-s1
juniperjunos_os_evolved
21.2:r3-s2
juniperjunos_os_evolved
21.2:r3-s3
juniperjunos_os_evolved
21.2:r3-s4
juniperjunos_os_evolved
21.3
juniperjunos_os_evolved
21.3:r1
juniperjunos_os_evolved
21.3:r1-s1
juniperjunos_os_evolved
21.3:r2
juniperjunos_os_evolved
21.3:r2-s1
juniperjunos_os_evolved
21.3:r2-s2
juniperjunos_os_evolved
21.3:r3
juniperjunos_os_evolved
21.3:r3-s1
juniperjunos_os_evolved
21.3:r3-s2
juniperjunos_os_evolved
21.3:r3-s3
juniperjunos_os_evolved
21.4
juniperjunos_os_evolved
21.4:r1
juniperjunos_os_evolved
21.4:r1-s1
juniperjunos_os_evolved
21.4:r1-s2
juniperjunos_os_evolved
21.4:r2
juniperjunos_os_evolved
21.4:r2-s1
juniperjunos_os_evolved
21.4:r2-s2
juniperjunos_os_evolved
21.4:r3
juniperjunos_os_evolved
21.4:r3-s1
juniperjunos_os_evolved
21.4:r3-s2
juniperjunos_os_evolved
21.4:r3-s3
juniperjunos_os_evolved
22.1:r1
juniperjunos_os_evolved
22.1:r1-s1
juniperjunos_os_evolved
22.1:r1-s2
juniperjunos_os_evolved
22.1:r2
juniperjunos_os_evolved
22.1:r2-s1
juniperjunos_os_evolved
22.1:r3
juniperjunos_os_evolved
22.1:r3-s1
juniperjunos_os_evolved
22.2:r1
juniperjunos_os_evolved
22.2:r1-s1
𝑥
= Vulnerable software versions