CVE-2022-22251

CVE-2022-22251 is a high-severity vulnerability affecting Juniper Networks Junos OS on cSRX Series devices, specifically versions 20.2R1 and later prior to 21.2R1. It stems from permission issues in the container filesystem and stored files, combined with storing passwords in a recoverable format. A local, low-privileged attacker can exploit this to elevate their privileges and gain full control over any cSRX software deployment. The CVSS score is 7.8 (High), indicating a low attack complexity and no user interaction required, leading to high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.