CVE:CVE-2023-28973
CNNVD:CNNVD-202304-1368
Juniper Networks Junos OS Evolved是美国瞻博网络（Juniper Networks）公司的Junos OS 的升级版系统。
Juniper Networks Junos OS Evolved存在授权问题漏洞，该漏洞源于的“ sysmanctl ”shell 命令中存在不当授权，攻击者利用该漏洞可以执行可能影响系统完整性或系统可用性的管理命令，以下产品和版本受到影响：Juniper Networks Junos OS Evolved 20.4R3-S5-EVO之前的所有版本、21.2R3-EVO之前的21.2版本、21.3R2-EVO 之前的 21.3 版本、21.4R1-S2-EVO、21.4R2-EVO 之前的 21.4 版本。
solution:Upgrade juniper junos_os_evolved to a higher version than 20.4,20.4,20.4:r1,20.4:r1-s1,20.4:r1-s2,20.4:r2,20.4:r2-s1,20.4:r2-s2,20.4:r2-s3,20.4:r3,20.4:r3-s1,20.4:r3-s2,20.4:r3-s3,20.4:r3-s4,21.1,21.1:r1,21.1:r1-s1,21.1:r2,21.1:r3,21.1:r3-s1,21.1:r3-s2,21.1:r3-s3,21.2,21.2:r1,21.2:r1-s1,21.2:r1-s2,21.2:r2,21.2:r2-s1,21.2:r2-s2,21.3,21.3:r1,21.3:r1-s1,21.4,21.4:r1,21.4:r1-s1,and avoid the version (,20.4),20.4,20.4:r1,20.4:r1-s1,20.4:r1-s2,20.4:r2,20.4:r2-s1,20.4:r2-s2,20.4:r2-s3,20.4:r3,20.4:r3-s1,20.4:r3-s2,20.4:r3-s3,20.4:r3-s4,21.1,21.1:r1,21.1:r1-s1,21.1:r2,21.1:r3,21.1:r3-s1,21.1:r3-s2,21.1:r3-s3,21.2,21.2:r1,21.2:r1-s1,21.2:r1-s2,21.2:r2,21.2:r2-s1,21.2:r2-s2,21.3,21.3:r1,21.3:r1-s1,21.4,21.4:r1,21.4:r1-s1