Ref# ADV2024_219 | Date: Jul 3rd 2024

---

Juniper Networks has published a security advisory highlighting vulnerabilities in the following products on June 27th, 2024. It is recommended that you take the necessary precautions by ensuring your products are always updated.

• Juniper Session Smart Conductor – multiple versions
• Juniper Session Smart Router – multiple versions
• Juniper WAN Assurance Router – multiple versions

For more information on these updates, you can follow this URL:
Juniper Networks Security Advisories – JSA83126

The Guyana National CIRT recommends that users and administrators review this update and apply it where necessary.

PDF Download: Juniper Networks Security Advisory

References

• Juniper Support Portal. (June 27th, 2024). Retrieved from Juniper Networks.
  https://supportportal.juniper.net/s/article/2024-06-Out-Of-Cycle-Security-Bulletin-Session-Smart-Router-SSR-On-redundant-router-deployments-API-authentication-can-be-bypassed-CVE-2024-2973?language=en_US
• Juniper Network Security Advisory. (June 28th, 2024). Retrieved from Canadian Centre for Cyber Security.
  https://www.cyber.gc.ca/en/alerts-advisories/juniper-networks-security-advisory-av24-359