Juniper Networks Apstra SSH Host Key Validation Vulnerability Allowing MITM Impersonation of Managed Devices

A vulnerability in the SSH implementation of Juniper Networks Apstra, present in all versions prior to 6.1.1, allows an unauthenticated man-in-the-middle attacker to impersonate managed devices. This vulnerability arises from inadequate validation of SSH host keys, enabling attackers to intercept and potentially manipulate SSH connections between Apstra and managed devices. As a result, attackers can impersonate managed devices and capture user credentials.

Impact

Exploitation of this vulnerability could lead to unauthorized impersonation of managed devices, allowing interception of user credentials.

Remediation

Users can upgrade to Apstra version 6.1.1 or any subsequent release to address this vulnerability. For guidance on which releases vulnerabilities are fixed, refer to Juniper's vulnerability release information KB16765.