CVE-2022-22239

CVE-2022-22239 is an Execution with Unnecessary Privileges vulnerability in the Management Daemon (mgd) of Juniper Networks Junos OS Evolved. It allows a locally authenticated, low-privilege attacker to escalate privileges to root on the local device, or potentially on a remote system with user interaction. This vulnerability affects specific versions of Junos OS Evolved prior to 20.4R3-S5-EVO, 21.1R3-EVO, 21.2R2-S1-EVO, 21.2R3-EVO, and 21.3R2-EVO. The vulnerability has a CVSSv3.1 score of 8.8 (HIGH), indicating a local attack vector with low complexity and low privileges required, leading to high impact on confidentiality, integrity, and availability. The EPSS score is very low, suggesting a low probability of exploitation in the wild. There is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.