SZB-8f9bc2e15c
Juniper patches 18 vulnerabilities in Session Smart Router and Conductor
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Juniper
- Product
- Session Smart Router and Session Smart Conductor
- First seen
Summary
Juniper Networks has patched 18 vulnerabilities in Session Smart Router and Session Smart Conductor, including two critical flaws scored CVSS 9.8. According to the advisory as reported, the critical flaws allow unauthenticated command execution and administrative access.
If you use Juniper
Update to version 7.0.5, 7.1.7, or 7.2.3 or later
Restrict management interfaces to trusted internal networks
Upgrade any end-of-life version, since Juniper will not fix it
What the sources say 1
· Mastodon: “Juniper Networks patched 18 vulnerabilities in Session Smart Router and Conductor, including two critical flaws (CVSS 9.8) that allow unauthenticated command execution and administrative access.” Source