CVE-2024-30407 [Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks
Hardcoded SSH host keys in Juniper JCNR and cRPD allow attackers to perform Person-in-the-Middle attacks, leading to complete container compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-30407?
CVE-2024-30407 is a critical vulnerability in Juniper Cloud Native Router (JCNR), published on 12 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Use of a Hard-coded Cryptographic Key vulnerability in Juniper Networks Juniper Cloud Native Router (JCNR) and containerized routing Protocol Deamon (cRPD) products allows an attacker to perform Person-in-the-Middle (PitM) attacks which results in complete compromise of the container.
Due to hardcoded SSH host keys being present on the container, a PitM attacker can intercept SSH traffic without being detected.
This issue affects Juniper Networks JCNR: * All versions before 23.4.
This issue affects Juniper Networks cRPD: * All versions before 23.4R1.
Weakness: CWE-321
Which versions are affected by CVE-2024-30407?
How do I fix CVE-2024-30407?
No fix has been published for CVE-2024-30407 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-30407 being exploited?
There is no known exploitation of CVE-2024-30407 in the wild and no public exploit code.
Sources
Also known as GHSA-wp5q-4qc3-582g.