A critical authentication vulnerability in Juniper Networks Apstra allows unauthenticated attackers to perform man-in-the-middle attacks and compromise managed device credentials.

This flaw involves a key exchange without entity authentication (CWE-322) caused by insufficient SSH host key validation. An unauthenticated attacker positioned as a man-in-the-middle can intercept SSH connections, impersonate managed devices, and capture sensitive user credentials.

The ability for an unauthenticated attacker to impersonate managed devices poses a severe risk to network integrity and confidentiality. Successful exploitation could lead to the unauthorized interception of administrative credentials, facilitating further lateral movement within the infrastructure. With a CVSS score of 8.7, this high-severity vulnerability requires immediate attention to prevent potential unauthorized access to critical network management planes.

Immediate Action: Upgrade Juniper Networks Apstra to version 6.1.1 or any subsequent release to address the host key validation flaw.

Proactive Monitoring: Monitor network traffic for anomalous SSH connection patterns and review authentication logs for signs of unauthorized device impersonation attempts.

Compensating Controls: Implement strict network segmentation to restrict access to the management interface and ensure that SSH connections to managed devices are performed over trusted, isolated management networks.

Public Exploit Available: No (exploit_available: false)

Given the potential for credential theft and device impersonation, organizations must prioritize upgrading their Apstra deployments to version 6.1.1. Verification of the patch installation is essential to ensure that SSH host key validation is correctly enforced across all managed device connections.