CVE-2023-28978: medium-severity vulnerability in Juniper Networks Junos OS Evolved
Junos OS Evolved: Read access to some confidential user information is possible
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.5%
An Insecure Default Initialization of Resource vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to read certain confidential information. In the default configuration it is possible to read confidential information about locally configured (administrative) users of the affected system. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S7-EVO on pending commit???; 21.1-EVO versions prior to 21.1R3-S4-EVO on awaiting build; 21.4-EVO versions prior to 21.4R3-S1-EVO; 22.2-EVO versions prior to 22.2R3-EVO; 21.2-EVO versions prior to 21.2R3-S5-EVO on pending commit???; 21.3-EVO version 21.3R1-EVO and later versions; 22.1-EVO version 22.1R1-EVO and later versions; 22.2-EVO versions prior to 22.2R2-S1-EVO.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Juniper Networks · Junos OS EvolvedRelated CVEs — Juniper Networks Junos OS Evolved
In the same product, most dangerous first.
CVE-2026-21902CRITICALJunos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as rootEPSS 18.5%CVE-2026-101967CRITICALJunos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is usedEPSS 3.9%CVE-2026-101978HIGHJunos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is usedEPSS 3.9%CVE-2026-102059HIGHJunos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific informationEPSS 3.9%CVE-2026-102031CRITICALJunos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabledEPSS 2.1%CVE-2023-28983HIGHJunos OS Evolved: Shell Injection vulnerability in the gNOI serverEPSS 1.5%