CVE-2024-39512: junos os evolved — Fix

Description

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the logged in user is not logged out. This allows a malicious attacker with physical access to the console to resume a previous session and possibly gain administrative privileges. This issue affects Junos OS Evolved: * from 23.2R2-EVO before 23.2R2-S1-EVO, * from 23.4R1-EVO before 23.4R2-EVO.

Is your site exposed to CVE-2024-39512?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.6

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-1263 CWE-1263

Affected Products

Vendor	Product	Versions
juniper	junos_os_evolved	All
juniper	junos_os_evolved	All
juniper	junos_os_evolved	All
juniper	junos_os_evolved	All

References

Advisories & Patches

https://supportportal.juniper.net/JSA82977 https://supportportal.juniper.net/JSA82977

Frequently Asked Questions

What is CVE-2024-39512? +

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the logged in user is not logged out. This allows a malicious attacker with physical access to the console to resume a previous session and possibly gain administrative privileges. This issue affects Junos OS Evolved: * from 23.2R2-EVO before 23.2R2-S1-EVO, * from 23.4R1-EVO before 23.4R2-EVO. It has a CVSS v3.1 base score of 6.6 (MEDIUM).

How severe is CVE-2024-39512? +

CVE-2024-39512 has a CVSS v3.1 score of 6.6 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-39512? +

CVE-2024-39512 affects products from juniper, specifically: junos_os_evolved. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-39512? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-6785

Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed …

CVE-2024-48973 9.3

The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and …

CVE-2023-38290 7.8

Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with …

CVE-2024-36438 7.3

eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead …

CVE-2025-8762 6.8

A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the …

CVE-2024-28326 6.8

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via …

CVE-2024-39512