Juniper Networks Session Smart Router vulnerabilities

Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration

Juniper Networks · Session Smart Router

Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing

Juniper Networks · Session Smart Router

Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection

Juniper Networks · Session Smart Router

Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed

Juniper Networks · Session Smart Router

Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options

Juniper Networks · Session Smart Router

Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management

Juniper Networks · Session Smart Router

Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting

Juniper Networks · Session Smart Router

Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules

Juniper Networks · Session Smart Router

Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation

Juniper Networks · Session Smart Router

Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root

Juniper Networks · Session Smart Router