CVE-2024-39546
Junos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalation
A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local attacker to modify certain files, allowing the attacker to cause any command to execute with root privileges leading to privilege escalation ultimately compromising the system.
This issue affects Junos OS Evolved:
- All versions prior to 21.2R3-S8-EVO,
- 21.4 versions prior to 21.4R3-S6-EVO,
- 22.1 versions prior to 22.1R3-S5-EVO,
- 22.2 versions prior to 22.2R3-S3-EVO,
- 22.3 versions prior to 22.3R3-S3-EVO,
- 22.4 versions prior to 22.4R3-EVO,
- 23.2 versions prior to 23.2R2-EVO.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Active
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Junos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalation
A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local attacker to modify certain files, allowing the attacker to cause any command to execute with root privileges leading to privilege escalation ultimately compromising the system.
This issue affects Junos OS Evolved:
- All versions prior to 21.2R3-S8-EVO,
- 21.4 versions prior to 21.4R3-S6-EVO,
- 22.1 versions prior to 22.1R3-S5-EVO,
- 22.2 versions prior to 22.2R3-S3-EVO,
- 22.3 versions prior to 22.3R3-S3-EVO,
- 22.4 versions prior to 22.4R3-EVO,
- 23.2 versions prior to 23.2R2-EVO.
- Record
CVE-2024-39546- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
EUVDEUVD-2024-38072
A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local attacker to modify certain files, allowing the attacker to cause any command to execute with root privileges leading to privilege escalation ultimately compromising the system.
This issue affects Junos OS Evolved:
- All versions prior to 21.2R3-S8-EVO,
- 21.4 versions prior to 21.4R3-S6-EVO,
- 22.1 versions prior to 22.1R3-S5-EVO,
- 22.2 versions prior to 22.2R3-S3-EVO,
- 22.3 versions prior to 22.3R3-S3-EVO,
- 22.4 versions prior to 22.4R3-EVO,
- 23.2 versions prior to 23.2R2-EVO.
- Record
EUVD-2024-38072- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-27x2-77hh-wh7h
A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of...
A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local attacker to modify certain files, allowing the attacker to cause any command to execute with root privileges leading to privilege escalation ultimately compromising the system.
This issue affects Junos OS Evolved:
- All versions prior to 21.2R3-S8-EVO,
- 21.4 versions prior to 21.4R3-S6-EVO,
- 22.1 versions prior to 22.1R3-S5-EVO,
- 22.2 versions prior to 22.2R3-S3-EVO,
- 22.3 versions prior to 22.3R3-S3-EVO,
- 22.4 versions prior to 22.4R3-EVO,
- 23.2 versions prior to 23.2R2-EVO.
- Record
GHSA-27x2-77hh-wh7h- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
NVD
A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local attacker to modify certain files, allowing the attacker to cause any command to execute with root privileges leading to privilege escalation ultimately compromising the system.
This issue affects Junos OS Evolved:
- All versions prior to 21.2R3-S8-EVO,
- 21.4 versions prior to 21.4R3-S6-EVO,
- 22.1 versions prior to 22.1R3-S5-EVO,
- 22.2 versions prior to 22.2R3-S3-EVO,
- 22.3 versions prior to 22.3R3-S3-EVO,
- 22.4 versions prior to 22.4R3-EVO,
- 23.2 versions prior to 23.2R2-EVO.
- Record
CVE-2024-39546- CVSS 4.0
- 7.0 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-39546 is a high vulnerability (CVSS 7.0) in Juniper Junos Os Evolved, published July 11, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. No source names a fixed version.