Juniper Routers Auth Bypass Flaw Leads to Complete Device Takeover

Threat Level – Red | Vulnerability Report

Summary:

Juniper Networks has released an emergency patch to fix a critical vulnerability CVE-2024-2973 that allows authentication bypass in their products, including Session Smart Router (SSR), Session Smart Conductor, and WAN Assurance Router. This security flaw could enable an attacker to gain complete control of the affected device.