The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69899 advisory.

  - An Improper Input Validation vulnerability in the J-Web component of Juniper Networks Junos OS may allow     an unauthenticated attacker to access data without proper authorization. Utilizing a crafted POST request,     deserialization may occur which could lead to unauthorized local file access or the ability to execute     arbitrary commands. This issue affects Juniper Networks Junos OS: all versions prior to 19.1R3-S9; 19.2     versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S7,     19.4R3-S9; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to     20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S2; 21.2 versions prior to     21.2R3-S1; 21.3 versions prior to 21.3R2-S2, 21.3R3; 21.4 versions prior to 21.4R1-S2, 21.4R2-S1, 21.4R3;
    22.1 versions prior to 22.1R1-S1, 22.1R2. (CVE-2022-22241)

  - A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allows an     unauthenticated attacker to run malicious scripts reflected off of J-Web to the victim's browser in the     context of their session within J-Web. This issue affects Juniper Networks Junos OS all versions prior to     19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to     19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions     prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S4; 21.2 versions     prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to     22.1R2. (CVE-2022-22242)

  - An XPath Injection vulnerability due to Improper Input Validation in the J-Web component of Juniper     Networks Junos OS allows an authenticated attacker to add an XPath command to the XPath stream, which may     allow chaining to other unspecified vulnerabilities, leading to a partial loss of confidentiality. This     issue affects Juniper Networks Junos OS: all versions prior to 19.1R3-S9; 19.2 versions prior to     19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions     prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions     prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S2; 21.2 versions prior to 21.2R3-S1; 21.3 versions     prior to 21.3R2-S2, 21.3R3; 21.4 versions prior to 21.4R1-S2, 21.4R2-S1, 21.4R3; 22.1 versions prior to     22.1R1-S1, 22.1R2. (CVE-2022-22243)

  - An XPath Injection vulnerability in the J-Web component of Juniper Networks Junos OS allows an     unauthenticated attacker sending a crafted POST to reach the XPath channel, which may allow chaining to     other unspecified vulnerabilities, leading to a partial loss of confidentiality. This issue affects     Juniper Networks Junos OS: all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3     versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.1 versions prior to 20.1R3-S5; 20.2     versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1     versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4     versions prior to 21.4R1-S2, 21.4R2; 22.1 versions prior to 22.1R1-S1, 22.1R2. (CVE-2022-22244)

  - A Path Traversal vulnerability in the J-Web component of Juniper Networks Junos OS allows an authenticated     attacker to upload arbitrary files to the device by bypassing validation checks built into Junos OS. The     attacker should not be able to execute the file due to validation checks built into Junos OS. Successful     exploitation of this vulnerability could lead to loss of filesystem integrity. This issue affects Juniper     Networks Junos OS: all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior     to 19.3R3-S7; 19.4 versions prior to 19.4R3-S9; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to     20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to     21.1R3-S2; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R2-S2, 21.3R3; 21.4 versions prior     to 21.4R1-S2, 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R1-S1, 22.1R2. (CVE-2022-22245)

  - A PHP Local File Inclusion (LFI) vulnerability in the J-Web component of Juniper Networks Junos OS may     allow a low-privileged authenticated attacker to execute an untrusted PHP file. By chaining this     vulnerability with other unspecified vulnerabilities, and by circumventing existing attack requirements,     successful exploitation could lead to a complete system compromise. This issue affects Juniper Networks     Junos OS: all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to     19.3R3-S6; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S5; 20.2 versions     prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions     prior to 21.1R3-S2; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R2-S2, 21.3R3; 21.4     versions prior to 21.4R1-S2, 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R1-S1, 22.1R2. (CVE-2022-22246)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Juniper Junos OS Multiple Vulnerabilities (JSA69899)

critical Nessus Plugin ID 166686

Version 1.7

Version 1.5

Version 1.3

Version 1.7 Nov 28, 2022, 4:23 PM CVSS metrics ("CVSSv2 score" changed from "4.3" to "10.0") CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 score source (changed from "CVE-2022-22242" to "CVE-2022-22241") CVSSv2 severity (based on CVE-2022-22241, severity increased from "Medium" to "High") Plugin Feed: 202211281623
Version 1.5 Oct 31, 2022, 3:52 PM CVSS metrics Plugin Feed: 202210311552
Version 1.3 Oct 28, 2022, 7:53 PM New Plugin Feed: 202210281953