Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-22229— Paragon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administration

Quick assessment

Affected
Juniper Networks Paragon Active Assurance (Formerly Netrounds)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Juniper Networks Paragon Active Assurance是美国瞻博网络（Juniper Networks）公司的一种可编程的测试和服务保证解决方案。使用基于软件和流量生成的测试代理，可作为 SaaS 解决方案从云中轻松使用和交付，或在 NFV 环境中本地部署。 Juniper Networks Paragon Active Assurance（Netrounds）3.1.1 之前的版本、3.2.1 之前的3.2 版本存在安全漏洞，该漏洞源于控制中心控制器网页中允许高权限攻击者具有

CVSS 8.4 · High EPSS 0.73% · P53
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-22229

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Paragon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administration
Source: CVE Program / CVE List V5
Vulnerability Description
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, a stored XSS (or persistent), in the Control Center Controller web pages of Juniper Networks Paragon Active Assurance (Formerly Netrounds) allows a high-privilege attacker with 'WRITE' permissions to store one or more malicious scripts that will infect any other authorized user's account when they accidentally trigger the malicious script(s) while managing the device. Triggering these attacks enables the attacker to execute commands with the permissions up to that of the superuser account. This issue affects: Juniper Networks Paragon Active Assurance (Formerly Netrounds) All versions prior to 3.1.1; 3.2 versions prior to 3.2.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Paragon Active Assurance 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Paragon Active Assurance是美国瞻博网络（Juniper Networks）公司的一种可编程的测试和服务保证解决方案。使用基于软件和流量生成的测试代理，可作为 SaaS 解决方案从云中轻松使用和交付，或在 NFV 环境中本地部署。 Juniper Networks Paragon Active Assurance（Netrounds）3.1.1 之前的版本、3.2.1 之前的3.2 版本存在安全漏洞，该漏洞源于控制中心控制器网页中允许高权限攻击者具有
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Juniper Networks Paragon Active Assurance (Formerly Netrounds) unspecified ~ 3.1.1 -

II. Public POCs for CVE-2022-22229

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-22229

请登录查看更多情报信息。

Vendor Advisories for CVE-2022-22229 (1)

Same Patch Batch · Juniper Networks · 2022-10-18 · 36 CVEs total

CVE-2022-22239 8.2 HIGH Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege esca
CVE-2022-22241 8.1 HIGH Junos OS: Vulnerability in J-Web may allow deserialization without authentication
CVE-2022-22251 7.8 HIGH cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues all
CVE-2022-22232 7.5 HIGH SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled
CVE-2022-22231 7.5 HIGH SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traf
CVE-2022-22236 7.5 HIGH Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE w
CVE-2022-22228 7.5 HIGH Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS)
CVE-2022-22218 7.5 HIGH Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash duri
CVE-2022-22211 7.5 HIGH Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling o
CVE-2022-22201 7.5 HIGH SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, th
CVE-2022-22246 7.5 HIGH Junos OS: PHP file inclusion vulnerability in J-Web
CVE-2022-22247 7.5 HIGH Junos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of
CVE-2022-22192 7.5 HIGH Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed
CVE-2022-22248 7.3 HIGH Junos OS Evolved: Incorrect file permissions can allow low-privileged user to cause anothe
CVE-2022-22223 6.5 MEDIUM Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted p
CVE-2022-22224 6.5 MEDIUM Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF
CVE-2022-22226 6.5 MEDIUM Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed
CVE-2022-22230 6.5 MEDIUM Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs
CVE-2022-22250 6.5 MEDIUM Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving
CVE-2022-22237 6.5 MEDIUM Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authe

Showing top 20 of 36 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: Juniper Networks
Same weakness: CWE-79

V. Comments for CVE-2022-22229

No comments yet

Leave a comment