CVE-2023-28971

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance (PAA) (Formerly Netrounds) allows an attacker to bypass existing firewall rules and limitations used to restrict internal communcations. The Test Agents (TA) Appliance connects to the Control Center (CC) using OpenVPN. TA's are assigned an internal IP address in the 100.70.0.0/16 range. Firewall rules exists to limit communication from TA's to the CC to specific services only. OpenVPN is configured to not allow direct communication between Test Agents in the OpenVPN application itself, and routing is normally not enabled on the server running the CC application. The timescaledb feature is installed as an optional package on the Control Center. When the timescaledb container is started, this causes side-effects by bypassing the existing firewall rules and limitations for Test Agent communications. Note: This issue only affects customers hosting their own on-prem Control Center. The Paragon Active Assurance Software as a Service (SaaS) is not affected by this vulnerability since the timescaledb service is not enabled. This issue affects all on-prem versions of Juniper Networks Paragon Active Assurance prior to 4.1.2.

• CWE-923

• https://supportportal.juniper.net/JSA70595Mitigation, Vendor Advisory
• https://supportportal.juniper.net/JSA70595Mitigation, Vendor Advisory

Published

Apr 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28965An Improper Check or Handling of Exceptional Conditions with…7.5
• CVE-2023-28966An Incorrect Default Permissions vulnerability in Juniper Ne…7.8
• CVE-2023-28967A Use of Uninitialized Resource vulnerability in the Border …7.5
• CVE-2023-28968An Improperly Controlled Sequential Memory Allocation vulner…5.3
• CVE-2023-2897The Brizy Page Builder plugin for WordPress is vulnerable to…5.3
• CVE-2023-28970An Improper Check or Handling of Exceptional Conditions vuln…6.5
• CVE-2023-28972An Improper Link Resolution Before File Access vulnerability…6.8
• CVE-2023-28973An Improper Authorization vulnerability in the 'sysmanctl' s…7.1
• CVE-2023-28974An Improper Check for Unusual or Exceptional Conditions vuln…6.5
• CVE-2023-28975An Unexpected Status Code or Return Value vulnerability in t…4.6
• CVE-2023-28976An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2023-28978An Insecure Default Initialization of Resource vulnerability…5.3