Numerous security issues impacting Juniper Networks’ Junos OS and its J-Web configuration interface leveraged by its EX switches and SRX firewalls have been resolved as part of recently issued updates, reports SecurityWeek. Attackers could leverage the most severe vulnerability a cross-site scripting bug, tracked as CVE-2024-21620 to facilitate malicious URL creation that could later enable arbitrary command execution with escalated privileges, while exploitation of the CVE-2024-21619 could allow sensitive data exposure across targeted networks, according to Juniper Networks.

Source: SC Magazine