Junos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions (Juniper Networks Junos OS Evolved)

CVE-2023-28973

HIGH 7.1

At a glance

Source: NVD
EPSS: EPSS 0.15 % · percentile 4 (2026-10-31)
State: PUBLISHED
Published: 2023-04-17 00:00 UTC
Updated: 2025-02-06 14:35 UTC
Assigner: juniper
NVD status: Modified

Search on…

Description

An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a local, authenticated attacker to execute administrative commands that could impact the integrity of the system or system availability. Administrative functions such as daemon restarting, routing engine (RE) switchover, and node shutdown can all be performed through exploitation of the 'sysmanctl' command. Access to the 'sysmanctl' command is only available from the Junos shell. Neither direct nor indirect access to 'sysmanctl' is available from the Junos CLI. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S5-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO; 21.4 versions prior to 21.4R1-S2-EVO, 21.4R2-EVO.

Weaknesses (CWE)

CWE-285 — Improper Authorization
CWE-287 — Improper Authentication

References

https://supportportal.juniper.net/JSA70597

Scores

Version	Score	Vector	Scored by
CVSS 3.1	HIGH 7.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	juniper
CVSS 3.1	HIGH 7.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	NVD · sirt@juniper.net (Secondary)

European references

ENISA EUVD · EUVD-2023-32591
GCVE · GCVE-0-2023-28973

CERT-FR advisories

CERTFR-2023-AVI-0310 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:* < 20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*

Affected products

Product	Versions
Juniper Networks · Junos OS Evolved	affected unspecified < 20.4R3-S5-EVO ; affected 21.2 < 21.2R3-EVO ; affected 21.3 < 21.3R2-EVO ; affected 21.4 < 21.4R1-S2-EVO, 21.4R2-EVO

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

⚠️ Junos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions (Juniper Networks Junos OS Evolved)