MEDIUM🇵🇱 Wersja polska

CVE-2024-30406

CVSS 6.7v4.0pub. 2024-04-12upd. 2026-01-23

A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials. This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO.  This issue does not affect releases before 23.1R1-EVO.

CVSS Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Juniper Acx5448

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx5448 D

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx5448 M

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx7020

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx7024

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx7024x

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx710

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx7100

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx7300

    HW
    Juniper
    wszystkie wersje

  • Juniper Acx7509

    HW
    Juniper
    wszystkie wersje

  • Juniper Junos Os Evolved

    OS
    Juniper
    23.123.2

  • Juniper Paragon Active Assurance Test Agent

    APP
    Juniper
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-21902CRITICAL9.3PL ✓ten sam produkt

RCE jako root w Juniper Junos OS Evolved — błędne uprawnienia do krytycznego zasobu

CVE-2021-0211CRITICAL10.0ten sam produkt

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Rout...

CVE-2025-59969HIGH7.1ten sam produkt

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forward...

CVE-2026-21919HIGH7.1ten sam produkt

An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Jun...

CVE-2026-33780HIGH7.1ten sam produkt

A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2a...