This vulnerability (CWE-306) in Juniper Networks Junos OS affects Linux-based line cards by missing authentication checks on critical command processing functions. Privileged local attackers can exploit this to gain root access on affected line cards, including MPC7 through MPC11, LC2101 through LC1105 series, MX304, MX-SPC3, SRX5K-SPC3, EX9200-40XS, and several FPC3 variants. The issue impacts all Junos OS versions before 22.4R3-S8, and certain versions from 23.2, 23.4, 24.2, 24.4, and 25.2 branches before specified patch releases. The CVSS 3.1 vector is AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, reflecting local attack vector, low complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Juniper manages remediation for this cloud service and a patch is available.

A privileged local attacker can exploit this vulnerability to gain root-level access on affected Linux-based line cards running Junos OS. This can lead to full compromise of the line card, impacting confidentiality, integrity, and availability of the device functions. The vulnerability affects multiple line card models and Junos OS versions prior to patched releases. There are no known exploits in the wild at this time.

A patch is available for this vulnerability. Juniper Networks manages remediation for this cloud-hosted service; users should apply the official patches corresponding to their Junos OS versions as listed (22.4R3-S8 and later, 23.2R2-S6 and later, 23.4R2-S6 and later, 24.2R2-S3 and later, 24.4R2 and later, 25.2R2 and later). Check the vendor advisory for the latest remediation guidance and apply updates promptly.