Login Request a demo
Medium severity · published Apr 12, 2024
CVE-2024-30406
Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials
5.5
CVSS
0.1%
EPSS
No
On KEV
Description
A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials. This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO.  This issue does not affect releases before 23.1R1-EVO.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JO
Junos OS Evolved · Juniper Networks
23.1R1-EVO through 23.2R2-EVO · source: vendor, NVD
PA
Paragon Active Assurance Test Agent · Juniper
All versions, or not specified · source: NVD
Affected product
JO
Junos OS Evolved
Juniper Networks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-30406
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-30406
Vendor Advisory
https://supportportal.juniper.net/JSA79104
Vendor Advisory
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Technical Description
https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/services-paa-test-agent.html
Third Party Advisory
https://www.juniper.net/documentation/us/en/software/junos/junos-install-upgrade-evo/topics/topic-map/paa-test-agent-install.html
More from Junos OS Evolved
9.8
CVE-2026-101954
Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
9.8
CVE-2026-101983
Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
9.8
CVE-2026-101982
Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
9.8
CVE-2026-33796
Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
9.8
CVE-2026-33789
Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service