Executive Summary

This vulnerability is a Key Exchange without Entity Authentication issue in the SSH implementation of Juniper Networks Apstra. It allows an unauthenticated man-in-the-middle (MITM) attacker to impersonate managed devices.

The root cause is insufficient SSH host key validation, which enables an attacker to intercept SSH connections from Apstra to managed devices, impersonate those devices, and potentially capture user credentials.

This affects all versions of Apstra before 6.1.1.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker to perform a man-in-the-middle attack on SSH connections between Apstra and managed devices.

As a result, the attacker can impersonate managed devices and capture sensitive user credentials, potentially leading to unauthorized access and compromise of network devices.

Useful 0 Not Useful 0