Critical severity · published Jun 27, 2024
CVE-2024-2973
Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed
10.0
CVSS
1.1%
EPSS
No
On KEV
Description
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device.
Only routers or conductors that are running in high-availability redundant configurations are affected by this vulnerability.
No other Juniper Networks products or platforms are affected by this issue.
This issue affects:
Session Smart Router:
* All versions before 5.6.15,
* from 6.0 before 6.1.9-lts,
* from 6.2 before 6.2.5-sts.
Session Smart Conductor:
* All versions before 5.6.15,
* from 6.0 before 6.1.9-lts,
* from 6.2 before 6.2.5-sts.
WAN Assurance Router:
* 6.0 versions before 6.1.9-lts,
* 6.2 versions before 6.2.5-sts.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Session Smart Conductor · Juniper Networks
before 5.6.15; 6.0 before 6.1.9-lts; 6.2 before 6.2.5-sts · source: vendor, CISA
SS
Session Smart Router · Juniper Networks
before 5.6.15; 6.0 before 6.1.9-lts; 6.2 before 6.2.5-sts · source: vendor, CISA
WA
WAN Assurance Router · Juniper Networks
6.0 before 6.1.9-lts; 6.2 before 6.2.5-sts · source: vendor, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-2973
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-2973
support.juniper.net
https://support.juniper.net/support/eol/software/ssr/
supportportal.juniper.net
https://supportportal.juniper.net/JSA83126
More from Session Smart Conductor
9.8
CVE-2026-103406
Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.
9.8
CVE-2025-21589
Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability
8.8
CVE-2026-106079
Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
8.8
CVE-2026-103407
Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management
8.8
CVE-2026-103403
Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules