cve/2024/CVE-2024-30407.md

### [CVE-2024-30407](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30407)
![](https://img.shields.io/static/v1?label=Product&message=Juniper%20Cloud%20Native%20Router%20(JCNR)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=cRPD&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%2023.4%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%2023.4R1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-321%20Use%20of%20Hard-coded%20Cryptographic%20Key&color=brighgreen)

### Description

The Use of a Hard-coded Cryptographic Key vulnerability in Juniper Networks Juniper Cloud Native Router (JCNR) and containerized routing Protocol Deamon (cRPD) products allows an attacker to perform Person-in-the-Middle (PitM) attacks which results in complete compromise of the container. Due to hardcoded SSH host keys being present on the container, a PitM attacker can intercept SSH traffic without being detected. This issue affects Juniper Networks JCNR:  *  All versions before 23.4.This issue affects Juniper Networks cRPD:  *  All versions before 23.4R1.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds