Juniper Networks Releases Critical Security Update for Routers

Juniper Networks released out-of-band patches for a critical authentication-bypass flaw (CVE-2024-2973, CVSS 10.0) in Session Smart Router, Session Smart Conductor, and some WAN Assurance Router versions when running in redundant/high-availability configurations; Juniper says it discovered the issue internally, found no evidence of active exploitation, and has applied automatic fixes for managed devices while advising all users to update affected versions.