
"Critical RCE Bug Found in Juniper Firewalls and Switches"
Juniper Networks has issued security updates to address a critical remote code execution (RCE) vulnerability in its SRX Series firewalls and EX Series switches, which could allow unauthenticated attackers to gain root privileges or launch denial-of-service attacks. The vulnerability, tracked as CVE-2024-21591, affects multiple Junos OS versions and can be mitigated by applying the security updates, upgrading JunOS, or restricting J-Web access to trusted network hosts. The U.S. cybersecurity agency, CISA, has also warned of previous RCE exploits targeting Juniper devices, emphasizing the need for prompt action to secure Internet-exposed networking equipment.