Lucene search
JuniperCVE-2022-22154HistoryJan 19, 2022 - 1:15 a.m.
CVE-2022-22154
2022-01-1901:15:08
CWE-642
CWE-668
juniper
web.nvd.nist.gov
42
juniper networks
junos os
cve-2022-22154
vulnerability
dos
junos fusion
nvd
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
6.8
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
26.4%
In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device (SD) control state machine of Juniper Networks Junos OS allows an attacker who is able to make physical changes to the cabling of the device to cause a denial of service (DoS). An SD can get rebooted and subsequently controlled by an Aggregation Device (AD) which does not belong to the original Fusion setup and is just connected to an extended port of the SD. To carry out this attack the attacker needs to have physical access to the cabling between the SD and the original AD. This issue affects: Juniper Networks Junos OS 16.1R1 and later versions prior to 18.4R3-S10; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R3-S4. This issue does not affect Juniper Networks Junos OS versions prior to 16.1R1.
Affected configurations
Node
juniperjunosMatch16.1r1
ORjuniperjunosMatch16.1r2
ORjuniperjunosMatch16.1r3
ORjuniperjunosMatch16.1r3-s10
ORjuniperjunosMatch16.1r3-s11
ORjuniperjunosMatch16.1r3-s8
ORjuniperjunosMatch16.1r4
ORjuniperjunosMatch16.1r4-s12
ORjuniperjunosMatch16.1r4-s2
ORjuniperjunosMatch16.1r4-s3
ORjuniperjunosMatch16.1r4-s4
ORjuniperjunosMatch16.1r4-s6
ORjuniperjunosMatch16.1r4-s8
ORjuniperjunosMatch16.1r4-s9
ORjuniperjunosMatch16.1r5
ORjuniperjunosMatch16.1r5-s4
ORjuniperjunosMatch16.1r6
ORjuniperjunosMatch16.1r6-s1
ORjuniperjunosMatch16.1r6-s3
ORjuniperjunosMatch16.1r6-s4
ORjuniperjunosMatch16.1r6-s6
ORjuniperjunosMatch16.1r7
ORjuniperjunosMatch16.1r7-s2
ORjuniperjunosMatch16.1r7-s3
ORjuniperjunosMatch16.1r7-s4
ORjuniperjunosMatch16.1r7-s5
ORjuniperjunosMatch16.1r7-s6
ORjuniperjunosMatch16.1r7-s7
ORjuniperjunosMatch16.1r7-s8
ORjuniperjunosMatch16.1x65
ORjuniperjunosMatch16.1x65-
ORjuniperjunosMatch16.1x65d20
ORjuniperjunosMatch16.1x65d30
ORjuniperjunosMatch16.1x65d35
ORjuniperjunosMatch16.1x65d40
ORjuniperjunosMatch16.1x65d48
ORjuniperjunosMatch16.1x70
ORjuniperjunosMatch16.2-
ORjuniperjunosMatch16.2r1
ORjuniperjunosMatch16.2r1-s6
ORjuniperjunosMatch16.2r2
ORjuniperjunosMatch16.2r2-s1
ORjuniperjunosMatch16.2r2-s10
ORjuniperjunosMatch16.2r2-s2
ORjuniperjunosMatch16.2r2-s5
ORjuniperjunosMatch16.2r2-s6
ORjuniperjunosMatch16.2r2-s7
ORjuniperjunosMatch16.2r2-s8
ORjuniperjunosMatch16.2r2-s9
ORjuniperjunosMatch16.2r3
ORjuniperjunosMatch17.1-
ORjuniperjunosMatch17.1r1
ORjuniperjunosMatch17.1r1-s7
ORjuniperjunosMatch17.1r2
ORjuniperjunosMatch17.1r2-s1
ORjuniperjunosMatch17.1r2-s10
ORjuniperjunosMatch17.1r2-s11
ORjuniperjunosMatch17.1r2-s2
ORjuniperjunosMatch17.1r2-s3
ORjuniperjunosMatch17.1r2-s4
ORjuniperjunosMatch17.1r2-s5
ORjuniperjunosMatch17.1r2-s6
ORjuniperjunosMatch17.1r2-s7
ORjuniperjunosMatch17.1r2-s8
ORjuniperjunosMatch17.1r2-s9
ORjuniperjunosMatch17.1r3
ORjuniperjunosMatch17.1r3-s1
ORjuniperjunosMatch17.1r3-s2
ORjuniperjunosMatch17.1r3-s3
ORjuniperjunosMatch17.2-
ORjuniperjunosMatch17.2r1
ORjuniperjunosMatch17.2r1-s1
ORjuniperjunosMatch17.2r1-s2
ORjuniperjunosMatch17.2r1-s3
ORjuniperjunosMatch17.2r1-s4
ORjuniperjunosMatch17.2r1-s5
ORjuniperjunosMatch17.2r1-s6
ORjuniperjunosMatch17.2r1-s7
ORjuniperjunosMatch17.2r1-s8
ORjuniperjunosMatch17.2r2
ORjuniperjunosMatch17.2r2-s11
ORjuniperjunosMatch17.2r2-s4
ORjuniperjunosMatch17.2r2-s6
ORjuniperjunosMatch17.2r2-s7
ORjuniperjunosMatch17.2r3
ORjuniperjunosMatch17.2r3-s1
ORjuniperjunosMatch17.2r3-s2
ORjuniperjunosMatch17.2r3-s3
ORjuniperjunosMatch17.2r3-s4
ORjuniperjunosMatch17.2x75
ORjuniperjunosMatch17.2x75-
ORjuniperjunosMatch17.2x75d100
ORjuniperjunosMatch17.2x75d102
ORjuniperjunosMatch17.2x75d110
ORjuniperjunosMatch17.2x75d50
ORjuniperjunosMatch17.2x75d70
ORjuniperjunosMatch17.2x75d90
ORjuniperjunosMatch17.2x75d91
ORjuniperjunosMatch17.2x75d92
ORjuniperjunosMatch17.3-
ORjuniperjunosMatch17.3r1
ORjuniperjunosMatch17.3r1-s1
ORjuniperjunosMatch17.3r1-s4
ORjuniperjunosMatch17.3r2
ORjuniperjunosMatch17.3r2-s1
ORjuniperjunosMatch17.3r2-s2
ORjuniperjunosMatch17.3r2-s3
ORjuniperjunosMatch17.3r2-s4
ORjuniperjunosMatch17.3r2-s5
ORjuniperjunosMatch17.3r3
ORjuniperjunosMatch17.3r3-
ORjuniperjunosMatch17.3r3-s1
ORjuniperjunosMatch17.3r3-s10
ORjuniperjunosMatch17.3r3-s11
ORjuniperjunosMatch17.3r3-s12
ORjuniperjunosMatch17.3r3-s2
ORjuniperjunosMatch17.3r3-s3
ORjuniperjunosMatch17.3r3-s4
ORjuniperjunosMatch17.3r3-s5
ORjuniperjunosMatch17.3r3-s6
ORjuniperjunosMatch17.3r3-s7
ORjuniperjunosMatch17.3r3-s8
ORjuniperjunosMatch17.3r3-s9
ORjuniperjunosMatch17.3r4
ORjuniperjunosMatch17.4-
ORjuniperjunosMatch17.4r1
ORjuniperjunosMatch17.4r1-s1
ORjuniperjunosMatch17.4r1-s2
ORjuniperjunosMatch17.4r1-s3
ORjuniperjunosMatch17.4r1-s4
ORjuniperjunosMatch17.4r1-s5
ORjuniperjunosMatch17.4r1-s6
ORjuniperjunosMatch17.4r1-s7
ORjuniperjunosMatch17.4r2
ORjuniperjunosMatch17.4r2-s1
ORjuniperjunosMatch17.4r2-s10
ORjuniperjunosMatch17.4r2-s11
ORjuniperjunosMatch17.4r2-s12
ORjuniperjunosMatch17.4r2-s13
ORjuniperjunosMatch17.4r2-s2
ORjuniperjunosMatch17.4r2-s3
ORjuniperjunosMatch17.4r2-s4
ORjuniperjunosMatch17.4r2-s5
ORjuniperjunosMatch17.4r2-s6
ORjuniperjunosMatch17.4r2-s7
ORjuniperjunosMatch17.4r2-s8
ORjuniperjunosMatch17.4r2-s9
ORjuniperjunosMatch17.4r3
ORjuniperjunosMatch17.4r3-s1
ORjuniperjunosMatch17.4r3-s2
ORjuniperjunosMatch17.4r3-s3
ORjuniperjunosMatch17.4r3-s4
ORjuniperjunosMatch17.4r3-s5
ORjuniperjunosMatch18.1
ORjuniperjunosMatch18.1-
ORjuniperjunosMatch18.1r
ORjuniperjunosMatch18.1r1
ORjuniperjunosMatch18.1r2
ORjuniperjunosMatch18.1r2-s1
ORjuniperjunosMatch18.1r2-s2
ORjuniperjunosMatch18.1r2-s4
ORjuniperjunosMatch18.1r3
ORjuniperjunosMatch18.1r3-s1
ORjuniperjunosMatch18.1r3-s10
ORjuniperjunosMatch18.1r3-s11
ORjuniperjunosMatch18.1r3-s12
ORjuniperjunosMatch18.1r3-s13
ORjuniperjunosMatch18.1r3-s2
ORjuniperjunosMatch18.1r3-s3
ORjuniperjunosMatch18.1r3-s4
ORjuniperjunosMatch18.1r3-s5
ORjuniperjunosMatch18.1r3-s6
ORjuniperjunosMatch18.1r3-s7
ORjuniperjunosMatch18.1r3-s8
ORjuniperjunosMatch18.1r3-s9
ORjuniperjunosMatch18.1r4
ORjuniperjunosMatch18.1x75-
ORjuniperjunosMatch18.1x75d10
ORjuniperjunosMatch18.2-
ORjuniperjunosMatch18.2r
ORjuniperjunosMatch18.2r1
ORjuniperjunosMatch18.2r1-
ORjuniperjunosMatch18.2r1-s2
ORjuniperjunosMatch18.2r1-s3
ORjuniperjunosMatch18.2r1-s4
ORjuniperjunosMatch18.2r1-s5
ORjuniperjunosMatch18.2r2
ORjuniperjunosMatch18.2r2-s1
ORjuniperjunosMatch18.2r2-s2
ORjuniperjunosMatch18.2r2-s3
ORjuniperjunosMatch18.2r2-s4
ORjuniperjunosMatch18.2r2-s5
ORjuniperjunosMatch18.2r2-s6
ORjuniperjunosMatch18.2r2-s7
ORjuniperjunosMatch18.2r2-s8
ORjuniperjunosMatch18.2r3
ORjuniperjunosMatch18.2r3-s1
ORjuniperjunosMatch18.2r3-s2
ORjuniperjunosMatch18.2r3-s3
ORjuniperjunosMatch18.2r3-s4
ORjuniperjunosMatch18.2r3-s5
ORjuniperjunosMatch18.2r3-s6
ORjuniperjunosMatch18.2r3-s7
ORjuniperjunosMatch18.2r3-s8
ORjuniperjunosMatch18.2x75
ORjuniperjunosMatch18.2x75-
ORjuniperjunosMatch18.2x75d12
ORjuniperjunosMatch18.2x75d20
ORjuniperjunosMatch18.2x75d30
ORjuniperjunosMatch18.2x75d40
ORjuniperjunosMatch18.2x75d411
ORjuniperjunosMatch18.2x75d5
ORjuniperjunosMatch18.2x75d50
ORjuniperjunosMatch18.2x75d51
ORjuniperjunosMatch18.2x75d60
ORjuniperjunosMatch18.2x75-d10
ORjuniperjunosMatch18.2x75-d30
ORjuniperjunosMatch18.3-
ORjuniperjunosMatch18.3r
ORjuniperjunosMatch18.3r1
ORjuniperjunosMatch18.3r1-s1
ORjuniperjunosMatch18.3r1-s2
ORjuniperjunosMatch18.3r1-s3
ORjuniperjunosMatch18.3r1-s4
ORjuniperjunosMatch18.3r1-s5
ORjuniperjunosMatch18.3r1-s6
ORjuniperjunosMatch18.3r2
ORjuniperjunosMatch18.3r2-s1
ORjuniperjunosMatch18.3r2-s2
ORjuniperjunosMatch18.3r2-s3
ORjuniperjunosMatch18.3r2-s4
ORjuniperjunosMatch18.3r3
ORjuniperjunosMatch18.3r3-s1
ORjuniperjunosMatch18.3r3-s2
ORjuniperjunosMatch18.3r3-s3
ORjuniperjunosMatch18.3r3-s4
ORjuniperjunosMatch18.3r3-s5
ORjuniperjunosMatch18.3r3-s6
ORjuniperjunosMatch18.4-
ORjuniperjunosMatch18.4r1
ORjuniperjunosMatch18.4r1-s1
ORjuniperjunosMatch18.4r1-s2
ORjuniperjunosMatch18.4r1-s3
ORjuniperjunosMatch18.4r1-s4
ORjuniperjunosMatch18.4r1-s5
ORjuniperjunosMatch18.4r1-s6
ORjuniperjunosMatch18.4r1-s7
ORjuniperjunosMatch18.4r2
ORjuniperjunosMatch18.4r2-s1
ORjuniperjunosMatch18.4r2-s2
ORjuniperjunosMatch18.4r2-s3
ORjuniperjunosMatch18.4r2-s4
ORjuniperjunosMatch18.4r2-s5
ORjuniperjunosMatch18.4r2-s6
ORjuniperjunosMatch18.4r2-s7
ORjuniperjunosMatch18.4r2-s8
ORjuniperjunosMatch18.4r3-s9
ORjuniperjunosMatch19.1-
ORjuniperjunosMatch19.1r1
ORjuniperjunosMatch19.1r1-s1
ORjuniperjunosMatch19.1r1-s2
ORjuniperjunosMatch19.1r1-s3
ORjuniperjunosMatch19.1r1-s4
ORjuniperjunosMatch19.1r1-s5
ORjuniperjunosMatch19.1r1-s6
ORjuniperjunosMatch19.1r2
ORjuniperjunosMatch19.1r2-s1
ORjuniperjunosMatch19.1r2-s2
ORjuniperjunosMatch19.1r3-s7
ORjuniperjunosMatch19.2-
ORjuniperjunosMatch19.2r1
ORjuniperjunosMatch19.2r1-s1
ORjuniperjunosMatch19.2r1-s2
ORjuniperjunosMatch19.2r1-s3
ORjuniperjunosMatch19.2r1-s4
ORjuniperjunosMatch19.2r1-s5
ORjuniperjunosMatch19.2r1-s6
ORjuniperjunosMatch19.2r1-s7
ORjuniperjunosMatch19.2r3-s4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:* |
| juniper | junos | 16.1 | cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:* |
CNA Affected
[
{
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "16.1R1",
"status": "unaffected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "16.1*",
"status": "affected",
"version": "16.1R1",
"versionType": "custom"
},
{
"lessThan": "18.4R3-S10",
"status": "affected",
"version": "18.4",
"versionType": "custom"
},
{
"lessThan": "19.1R3-S7",
"status": "affected",
"version": "19.1",
"versionType": "custom"
},
{
"lessThan": "19.2R3-S4",
"status": "affected",
"version": "19.2",
"versionType": "custom"
}
]
}
]References
Related
cnvd
cnvd
Juniper Networks Junos has unspecified vulnerabilities
2022-01-19 00:00:00
nvd
nvd
CVE-2022-22154
2022-01-19 01:15:08
nessus
nessus
Juniper Junos OS Vulnerability (JSA11262)
2022-01-12 00:00:00
cvelist
cvelist
prion
prion
Xxe
2022-01-19 01:15:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
6.8
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
26.4%
Related for CVE-2022-22154