deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-31364
Published: 2024-04-12
Description: Cross-Site Request Forgery (CSRF) vulnerability in ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts.This issue affects ELEX WooCommerce Dynamic Pricing and Discounts: from n/a through 2.1.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/elex-woocommerce-dynamic-pricing-and-discounts/wordpress-elex-woocommerce-dynamic-pricing-and-discounts-plugin-2-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/elex-woocommerce-dynamic-pricing-and-discounts/wordpress-elex-woocommerce-dynamic-pricing-and-discounts-plugin-2-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2024-31818
Published: 2024-04-12
Description: Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; https://github.com/jeffpiazza/derbynet/blob/1ae0bb55c3990dec8fd9b9f4a82400be9a75de92/website/kiosk.php; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-3685
Published: 2024-04-12
Description: A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselect_main.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260472. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Echosssy/CVE/blob/main/Dedecms%E6%9C%80%E6%96%B0%E7%89%88SQL%E6%B3%A8%E5%85%A5.docx; https://vuldb.com/?ctiid.260472; https://vuldb.com/?id.260472
CVE: CVE-2023-51409
Published: 2024-04-12
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/ai-engine/wordpress-ai-engine-plugin-1-9-98-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve; https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2023-51409; https://patchstack.com/database/vulnerability/ai-engine/wordpress-ai-engine-plugin-1-9-98-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2024-29461
Published: 2024-04-12
Description: An issue in Floodlight SDN OpenFlow Controller v.1.2 allows a remote attacker to cause a denial of service via the datapath id component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: https://gist.github.com/ErodedElk/399a226905c574efe705e3bff77955e3; https://github.com/floodlight/floodlight/issues/867; https://gist.github.com/ErodedElk/399a226905c574efe705e3bff77955e3
CVE: CVE-2024-2397
Published: 2024-04-12
Description: Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile.  This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-835
References: https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GEZRGR3QCW2ZNFIAWMZZOG4ZLFLFNG2M/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUUI2MBVHFENXNBCHDQZP2RBBA2VD5HG/
CVE: CVE-2024-30845
Published: 2024-04-12
Description: Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94
References: https://gist.github.com/Zshan7que/c813f2b52daab08c9fb4f6c6b8178b66; https://github.com/netcccyun/pan/issues/6; https://gist.github.com/Zshan7que/c813f2b52daab08c9fb4f6c6b8178b66
CVE: CVE-2024-31839
Published: 2024-04-12
Description: Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents/; https://github.com/tiagorlampert/CHAOS; https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents/
CVE: CVE-2024-3686
Published: 2024-04-12
Description: A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file update_guide.php. The manipulation of the argument files leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260473 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-24, CWE-22
References: https://github.com/Echosssy/CVE/blob/main/Dedecms%E6%9C%80%E6%96%B0%E7%89%88%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4%E7%BB%95%E8%BF%87.pdf; https://vuldb.com/?ctiid.260473; https://vuldb.com/?id.260473
CVE: CVE-2024-3687
Published: 2024-04-12
Description: A vulnerability was found in bihell Dice 3.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-260474 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/fubxx/CVE/blob/main/DiceCMS-XSS.md; https://vuldb.com/?ctiid.260474; https://vuldb.com/?id.260474
CVE: CVE-2024-3688
Published: 2024-04-12
Description: A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It has been declared as critical. This vulnerability affects unknown code of the file /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=. The manipulation of the argument groupId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260476. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Echosssy/CVE/tree/main; https://vuldb.com/?ctiid.260476; https://vuldb.com/?id.260476
CVE: CVE-2024-3704
Published: 2024-04-12
Description: SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to inject malicious SQL code into login page to bypass it or even retrieve all the information stored in the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys; https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x
CVE: CVE-2024-3705
Published: 2024-04-12
Description: Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/M_Icons.php' modifying the file extension, due to lack of file extension verification, resulting in a webshell injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys; https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x
CVE: CVE-2024-3706
Published: 2024-04-12
Description: Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to view a php backup file (controlaccess.php-LAST) where database credentials are stored.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys; https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x
CVE: CVE-2024-3707
Published: 2024-04-12
Description: Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to enumerate all files in the web tree by accessing a php file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-548
References: https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys; https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x
CVE: CVE-2023-51499
Published: 2024-04-12
Description: Missing Authorization vulnerability in WooCommerce WooCommerce Shipping Per Product.This issue affects WooCommerce Shipping Per Product: from n/a through 2.5.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/woocommerce-shipping-per-product/wordpress-woocommerce-shipping-per-product-plugin-2-5-4-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce-shipping-per-product/wordpress-woocommerce-shipping-per-product-plugin-2-5-4-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-51515
Published: 2024-04-12
Description: Missing Authorization vulnerability in Undsgn Uncode Core allows Privilege Escalation.This issue affects Uncode Core: from n/a through 2.8.8.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/uncode-core/wordpress-uncode-core-plugin-2-8-8-privilege-escalation-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/uncode-core/wordpress-uncode-core-plugin-2-8-8-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2023-52211
Published: 2024-04-12
Description: Missing Authorization vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.0.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wp-job-manager/wordpress-wp-job-manager-plugin-2-0-0-unauthenticated-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-job-manager/wordpress-wp-job-manager-plugin-2-0-0-unauthenticated-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-21590
Published: 2024-04-12
Description: An Improper Input Validation vulnerability in Juniper Tunnel Driver (jtd) and ICMP module of Juniper Networks Junos OS Evolved allows an unauthenticated attacker within the MPLS administrative domain to send specifically crafted packets to the Routing Engine (RE) to cause a Denial of Service (DoS). 

When specifically crafted transit MPLS IPv4 packets are received by the Packet Forwarding Engine (PFE), these packets are internally forwarded to the RE. Continued receipt of these packets may create a sustained Denial of Service (DoS) condition.

This issue affects Juniper Networks Junos OS:

  *  All versions before 21.2R3-S8-EVO;
  *  from 21.4-EVO before 21.4R3-S6-EVO;
  *  from 22.2-EVO before 22.2R3-S4-EVO;
  *  from 22.3-EVO before 22.3R3-S3-EVO;
  *  from 22.4-EVO before 22.4R3-EVO;
  *  from 23.2-EVO before 23.2R2-EVO.
  *  from 23.4-EVO before 23.4R1-S1-EVO.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://supportportal.juniper.net/JSA75728; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N; https://supportportal.juniper.net/JSA75728
CVE: CVE-2024-21593
Published: 2024-04-12
Description: An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).

If an attacker sends a specific MPLS packet, which upon processing, causes an internal loop, that leads to a PFE crash and restart. Continued receipt of these packets leads to a sustained Denial of Service (DoS) condition.
 
Circuit cross-connect (CCC) needs to be configured on the device for it to be affected by this issue.

This issue only affects MX Series with MPC10, MPC11, LC9600, and MX304.

This issue affects:
Juniper Networks Junos OS
21.4 versions from 21.4R3 earlier than 21.4R3-S5;
22.2 versions from 22.2R2 earlier than 22.2R3-S2;
22.3 versions from 22.3R1 earlier than 22.3R2-S2;
22.3 versions from 22.3R3 earlier than 22.3R3-S1
22.4 versions from 22.4R1 earlier than 22.4R2-S2, 22.4R3;
23.2 versions earlier than 23.2R1-S1, 23.2R2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-703
References: https://supportportal.juniper.net/JSA75732; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L; https://supportportal.juniper.net/JSA75732
CVE: CVE-2024-21598
Published: 2024-04-12
Description: An Improper Validation of Syntactic Correctness of Input vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).

If a BGP update is received over an established BGP session which contains a tunnel encapsulation attribute with a specifically malformed TLV, rpd will crash and restart.

This issue affects Juniper Networks
Junos OS:
  *  20.4 versions 20.4R1 and later versions earlier than 20.4R3-S9;
  *  21.2 versions earlier than 21.2R3-S7;
  *  21.3 versions earlier than 21.3R3-S5;
  *  21.4 versions earlier than 21.4R3-S5;
  *  22.1 versions earlier than 22.1R3-S4;
  *  22.2 versions earlier than 22.2R3-S3;
  *  22.3 versions earlier than 22.3R3-S1;
  *  22.4 versions earlier than 22.4R3;
  *  23.2 versions earlier than 23.2R1-S2, 23.2R2;



Junos OS Evolved:
  *  20.4-EVO versions 20.4R1-EVO and later versions earlier than 20.4R3-S9-EVO;
  *  21.2-EVO versions earlier than 21.2R3-S7-EVO;
  *  21.3-EVO versions earlier than 21.3R3-S5-EVO;
  *  21.4-EVO versions earlier than 21.4R3-S5-EVO;
  *  22.1-EVO versions earlier than 22.1R3-S4-EVO;
  *  22.2-EVO versions earlier than 22.2R3-S3-EVO;
  *  22.3-EVO versions earlier than 22.3R3-S1-EVO;
  *  22.4-EVO versions earlier than 22.4R3-EVO;
  *  23.2-EVO versions earlier than 23.2R1-S2-EVO, 23.2R2-EVO;



This issue does not affect Juniper Networks
  *  Junos OS versions earlier than 20.4R1;
  *  Junos OS Evolved versions earlier than 20.4R1-EVO.



This is a related but separate issue than the one described in JSA79095.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1286
References: http://supportportal.juniper.net/JSA75739; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L; http://supportportal.juniper.net/JSA75739
CVE: CVE-2024-21605
Published: 2024-04-12
Description: An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).



Specific valid link-local traffic is not blocked on ports in STP blocked state but is instead sent to the control plane of the device. This leads to excessive resource consumption and in turn severe impact on all control and management protocols of the device.



This issue affects Juniper Networks Junos OS:
  *  21.2 version 21.2R3-S3 and later versions earlier than 21.2R3-S6;
  *  22.1 version 22.1R3 and later versions earlier than 22.1R3-S4;
  *  22.2 version 

22.2R2

and later versions earlier than 22.2R3-S2;
  *  22.3 version 

22.3R2 

and later versions earlier than 22.3R3-S1;

  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;
  *  23.2 versions earlier than 23.2R1-S1, 23.2R2.




This issue does not affect Juniper Networks Junos OS 21.4R1 and later versions of 21.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://supportportal.juniper.net/JSA75746; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L; https://supportportal.juniper.net/JSA75746
CVE: CVE-2024-21609
Published: 2024-04-12
Description: A Missing Release of Memory after Effective Lifetime vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an administratively adjacent attacker which is able to successfully establish IPsec tunnels to cause a Denial of Service (DoS).

If specific values for the IPsec parameters local-ip, remote-ip, remote ike-id, and traffic selectors are sent from the peer, a memory leak occurs during every IPsec SA rekey which is carried out with a specific message sequence. This will eventually result in an iked process crash and restart.

The iked process memory consumption can be checked using the below command:
  user@host> show system processes extensive | grep iked
           PID   USERNAME     PRI  NICE    SIZE    RES    STATE    C   TIME  WCPU COMMAND
           56903 root         31    0      4016M  2543M   CPU0     0   2:10  10.50% iked

This issue affects Juniper Networks Junos OS:
  *  All versions earlier than 20.4R3-S9;
  *  21.2 versions earlier than 21.2R3-S7;
  *  21.3 versions earlier than 21.3R3-S5;
  *  21.4 versions earlier than 21.4R3-S4;
  *  22.1 versions earlier than 22.1R3-S3;
  *  22.2 versions earlier than 22.2R3-S2;
  *  22.3 versions earlier than 22.3R3;
  *  22.4 versions earlier than 22.4R3;
  *  23.2 versions earlier than 23.2R1-S2, 23.2R2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: http://supportportal.juniper.net/JSA75750; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L; http://supportportal.juniper.net/JSA75750
CVE: CVE-2024-21610
Published: 2024-04-12
Description: An Improper Handling of Exceptional Conditions vulnerability in the Class of Service daemon (cosd) of Juniper Networks Junos OS allows an authenticated, network-based attacker with low privileges to cause a limited Denial of Service (DoS).

In a scaled CoS scenario with 1000s of interfaces, when specific low privileged commands, received over NETCONF, SSH or telnet, are handled by cosd on behalf of mgd, the respective child management daemon (mgd) processes will get stuck. In case of (Netconf over) SSH this leads to stuck SSH sessions, so that when the connection-limit for SSH is reached, new sessions can't be established anymore. A similar behavior will be seen for telnet etc.

Stuck mgd processes can be monitored by executing the following command:

  user@host> show system processes extensive | match mgd | match sbwait

This issue affects Juniper Networks Junos OS:
  *  All versions earlier than 20.4R3-S9;
  *  21.2 versions earlier than 21.2R3-S7;
  *  21.3 versions earlier than 21.3R3-S5;
  *  21.4 versions earlier than 21.4R3-S5;
  *  22.1 versions earlier than 22.1R3-S4;
  *  22.2 versions earlier than 22.2R3-S3;
  *  22.3 versions earlier than 22.3R3-S2;
  *  22.4 versions earlier than 22.4R3;
  *  23.2 versions earlier than 23.2R1-S2, 23.2R2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-755
References: http://supportportal.juniper.net/JSA75751; http://supportportal.juniper.net/JSA75751; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVE: CVE-2024-21615
Published: 2024-04-12
Description: An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to access confidential information on the system.

On all Junos OS and Junos OS Evolved platforms, when NETCONF traceoptions are configured, and a super-user performs specific actions via NETCONF, then a low-privileged user can access sensitive information compromising the confidentiality of the system.
This issue affects:

Junos OS:



  *  all versions before 21.2R3-S7, 

  *  from 21.4 before 21.4R3-S5, 

  *  from 22.1 before 22.1R3-S5, 

  *  from 22.2 before 22.2R3-S3, 

  *  from 22.3 before 22.3R3-S2, 

  *  from 22.4 before 22.4R3, 

  *  from 23.2 before 23.2R1-S2.





Junos OS Evolved: 



  *  all versions before 21.2R3-S7-EVO, 

  *  from 21.3 before 21.3R3-S5-EVO, 

  *  from 21.4 before 21.4R3-S5-EVO, 

  *  from 22.1 before 22.1R3-S5-EVO, 

  *  from 22.2 before 22.2R3-S3-EVO, 

  *  from 22.3 before 22.3R3-S2-EVO,

  *  from 22.4 before 22.4R3-EVO, 

  *  from 23.2 before 23.2R1-S2.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://supportportal.juniper.net/JSA75756; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N; https://supportportal.juniper.net/JSA75756
CVE: CVE-2024-21618
Published: 2024-04-12
Description: An Access of Memory Location After End of Buffer vulnerability in the Layer-2 Control Protocols Daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause Denial of Service (DoS).

On all Junos OS and Junos OS Evolved platforms, when LLDP is enabled on a specific interface, and a malformed LLDP packet is received, l2cpd crashes and restarts. The impact of the l2cpd crash is reinitialization of STP protocols (RSTP, MSTP or VSTP), and MVRP and ERP. Also, if any services depend on LLDP state (like PoE or VoIP device recognition), then these will also be affected.

This issue affects:

Junos OS:
  *  from 21.4 before 21.4R3-S4, 

  *  from 22.1 before 22.1R3-S4, 

  *  from 22.2 before 22.2R3-S2, 

  *  from 22.3 before 22.3R2-S2, 22.3R3-S1, 

  *  from 22.4 before 22.4R3, 

  *  from 23.2 before 23.2R2.




 Junos OS Evolved:
  *  from 21.4-EVO before 21.4R3-S5-EVO, 

  *  from 22.1-EVO before 22.1R3-S4-EVO, 

  *  from 22.2-EVO before 22.2R3-S2-EVO, 

  *  from 22.3-EVO before 22.3R2-S2-EVO, 22.3R3-S1-EVO, 

  *  from 22.4-EVO before 22.4R3-EVO, 

  *  from 23.2-EVO before 23.2R2-EVO.




This issue does not affect:
  *  Junos OS versions prior to 21.4R1;

  *  Junos OS Evolved versions prior to 21.4R1-EVO.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-788, CWE-125
References: https://supportportal.juniper.net/JSA75759; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L; https://supportportal.juniper.net/JSA75759
CVE: CVE-2024-30381
Published: 2024-04-12
Description: An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjacent attacker with root access to a Test Agent Appliance the ability to access sensitive information about downstream devices.

The "netrounds-probe-login" daemon (also called probe_serviced) exposes functions where the Test Agent (TA) Appliance pushes interface state/config, unregister itself, etc.  The remote service accidentally exposes an internal database object that can be used for direct database access on the Paragon Active Assurance Control Center.




This issue affects Paragon Active Assurance: 4.1.0, 4.2.0.
CVSS Score: 8.4 (HIGH)
CWE: CWE-200
References: https://supportportal.juniper.net/JSA79173; https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H; https://supportportal.juniper.net/JSA79173