CVE-2022-22251: cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-18 · updated 2026-06-17
Weakness: CWE-257

Description

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.

Affected products

Juniper Junos OS: from 20.2 before 21.2 — fixed in 21.2

How to fix

Upgrade to a fixed version: Juniper Junos OS 21.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-22251 or the next vulnerability affects your stack