CVE-2024-39512
Published: 10 July 2024
Summary
CVE-2024-39512 is a high-severity Improper Physical Access Control (CWE-1263) vulnerability in Juniper Junos Os Evolved. Its CVSS base score is 7.0 (High).
Operationally, ranked at the 36.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-38038
Vulnerability details
An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the…
more
logged in user is not logged out. This allows a malicious attacker with physical access to the console to resume a previous session and possibly gain administrative privileges. This issue affects Junos OS Evolved: * from 23.2R2-EVO before 23.2R2-S1-EVO, * from 23.4R1-EVO before 23.4R2-EVO.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Field maintenance requires physical or on-site access, and restricting it mitigates improper physical access control.
Restricting access to media directly implements controls to prevent improper physical access to storage media.
Physically controlling and securely storing media directly implements proper physical access controls for system media.
Prohibiting portable storage devices without identifiable owners is a direct physical access control measure limiting untraceable media interaction with systems.
Placement for authorized access and protection against unauthorized activation specifically address improper physical access control.
Automatic emergency lighting ensures visibility on exits and evacuation routes during power outages, reducing an attacker's ability to exploit improper physical access controls by using darkness to navigate or access restricted areas.
Directly implements authorization and control of physical items entering and exiting the facility to prevent improper physical access.
Requiring documentation of allowed sites plus implementation and assessment of controls at alternate work sites directly prevents improper physical access to systems and data.