CVE-2024-30406

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on network devices allows a local, authenticated attacker with high privileges to read all other users login credentials.

This issue affects only Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on these devices from 23.1R1-EVO through 23.2R2-EVO.

This issue does not affect releases before 23.1R1-EVO.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-313

Affected software

No affected versions have been published.

Timeline

Published: Apr 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-304078.1The Use of a Hard-coded Cryptographic Key vulnerability in Juniper Networks Juniper Cloud Native Router (JCNR) and containerized routing Pro CVE-2024-304095.3An Improper Check for Unusual or Exceptional Conditions vulnerability in telemetry processing of Juniper Networks Junos OS and Junos OS Evol CVE-2024-30419.8A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects u CVE-2024-304105.8An Incorrect Behavior Order in the routing engine (RE) of Juniper Networks Junos OS on EX4300 Series allows traffic intended to the device t CVE-2024-304137.5Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will aff CVE-2024-304147.5Command injection vulnerability in the AccountManager module. Impact: Successful exploitation of this vulnerability may affect service confi CVE-2024-304159.1Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will aff CVE-2024-304167.5Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availa CVE-2024-304177.5Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service CVE-2024-304187.5Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of this vulnerability wi CVE-2024-304195.4Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ve CVE-2024-30429.1A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown proc