CVE-2023-28983

juniper junos os evolved

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-28983

Katalog CVE

CVSS 8.8 · High EPSS 1,5%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada juniper junos os evolved. Skor CVSS 3.1 8.8 (High) menurut juniper.net.

Deskripsi (NVD)

An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4 version 21.4R1-EVO and later versions prior to 22.1R1-EVO.

Rincian

Terbit di NVD
17 April 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber juniper.net
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
EPSS (30 hari)
1,5% peluang dieksploitasi; lebih tinggi dari 73,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper junos os evolved Versi 21.4
juniper junos os evolved Versi 21.4 r1
juniper junos os evolved Versi 21.4 r1-s1
juniper junos os evolved Versi 21.4 r1-s2
juniper junos os evolved Versi 21.4 r2
juniper junos os evolved Versi 21.4 r2-s1
juniper junos os evolved Versi 21.4 r2-s2
juniper junos os evolved Versi 21.4 r3
juniper junos os evolved Versi 21.4 r3-s1
juniper junos os evolved Versi 21.4 r3-s2
juniper junos os evolved Versi 21.4 r3-s3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.