Session Smart Conductor
Approved changes feed: RSS · Atom
cpe:2.3:a:juniper_networks:session_smart_conductor:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Juniper Networks (75c1b4ad-b137-51c1-bf9a-3bc90c5e98be) |
|---|---|
| Product | Session Smart Conductor (8065267d-77b8-56b3-b9ff-570e7d91d740) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-106079 |
vulnerable | 2026-11-03 10:16:14.118805 |
Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
HIGH (8.8)
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.
Published: 2026-10-28T16:37:49.668Z
Updated: 2026-11-05T19:14:12.120Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103400 |
vulnerable | 2026-11-03 10:15:49.338303 |
Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup
MEDIUM (5.5)
An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of service via the creation of specially named directories and a service restart.
Published: 2026-10-28T16:34:29.792Z
Updated: 2026-10-29T01:52:03.696Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103390 |
vulnerable | 2026-11-03 10:15:49.265194 |
Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification
MEDIUM (5.3)
An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.
Published: 2026-10-28T16:33:16.471Z
Updated: 2026-10-29T01:52:04.374Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103404 |
vulnerable | 2026-11-03 10:15:49.252182 |
Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials
MEDIUM (6.8)
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory.
Published: 2026-10-28T16:35:25.296Z
Updated: 2026-11-06T18:30:49.671Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103401 |
vulnerable | 2026-11-03 10:15:49.228445 |
Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root
HIGH (8.8)
An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.
This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.
Published: 2026-10-28T16:34:44.566Z
Updated: 2026-11-06T18:31:53.846Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103405 |
vulnerable | 2026-11-03 10:15:49.162441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103403 |
vulnerable | 2026-11-03 10:15:48.574878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103407 |
vulnerable | 2026-11-03 10:15:48.545260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103402 |
vulnerable | 2026-11-03 10:15:48.382055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103406 |
vulnerable | 2026-11-03 10:15:48.327200 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21589 |
vulnerable | 2026-06-08 07:08:56.685406 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2973 |
vulnerable | 2026-06-08 06:35:27.875127 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.