CVE-2024-30407
Severity CVSS v4.0:
Pending analysis
Type:
CWE-321
Use of Hard-coded Cryptographic Key
Publication date:
12/04/2024
Last modified:
16/05/2024
Description
The Use of a Hard-coded Cryptographic Key vulnerability in Juniper Networks Juniper Cloud Native Router (JCNR) and containerized routing Protocol Deamon (cRPD) products allows an attacker to perform Person-in-the-Middle (PitM) attacks which results in complete compromise of the container. <br />
<br />
Due to hardcoded SSH host keys being present on the container, a PitM attacker can intercept SSH traffic without being detected. <br />
<br />
This issue affects Juniper Networks JCNR:<br />
* All versions before 23.4.<br />
<br />
<br />
This issue affects Juniper Networks cRPD:<br />
* All versions before 23.4R1.
Impact
Base Score 3.x
8.10
Severity 3.x
HIGH