This vulnerability (CWE-296) involves Junos OS SRX devices not properly verifying the chain of trust for server certificates when connecting to the Security Director cloud. This insufficient verification enables a PITM attacker to intercept and access sensitive information, including credentials, and potentially alter data in transit. Affected versions include all releases before 22.4R3-S9, 23.2 versions before 23.2R2-S6, 23.4 versions before 23.4R2-S7, 24.2 versions before 24.2R2-S3, 24.4 versions before 24.4R2-S2, and 25.2 versions before 25.2R1-S2 and 25.2R2. The vulnerability is rated medium severity with a CVSS 3.1 score of 6.5 (Network attack vector, High attack complexity, No privileges required, No user interaction, Unchanged scope, High confidentiality impact, Low integrity impact, No availability impact). Juniper manages remediation for this cloud-hosted service, and a patch is available.

Successful exploitation allows a proxy-in-the-middle attacker to intercept communications between SRX devices and the Security Director cloud, gaining access to confidential information such as credentials and potentially modifying data. This compromises confidentiality and partially impacts integrity but does not affect availability. The medium CVSS score reflects this moderate impact.

A patch is available from Juniper Networks to address this vulnerability. Since the affected component is a cloud service, Juniper manages remediation on the server side. Users should ensure their devices are updated to the fixed versions listed (22.4R3-S9 or later, 23.2R2-S6 or later, 23.4R2-S7 or later, 24.2R2-S3 or later, 24.4R2-S2 or later, 25.2R1-S2 or later). Check the vendor advisory for the latest patch and update instructions.