Article explains, what exactly is meant by local access in terms of computer networking.
In CVE-2023-44194 description
https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-An-unauthenticated-attacker-with-local-access-to-the-device-can-create-a-backdoor-with-root-privileges-CVE-2023-44194?language=en_US
there is this bit of text:
"allows an unauthenticated attacker with local access to the device"
and I need to know the definition of "local access"?
are we "safe" if the equipment is in an access-controlled room and unauthorized people have no way of physically touching the equipment?
is "local access" the ability to reach the management IP/control plane of the device?
or is it something else?
Checked and couldn't find any further explanation on the "local access to the device" part, but In Networks, local access generally means access to the device without any network (that implies, physical access to the device).
So if you have security measures that prevent the unauthorized physical access to the device, you are safe from this CVE-2023-44194.
Local access- Access to an organizational system by a user (or process acting on behalf of a user) communicating through a direct connection without the use of a network.
Reference: https://csrc.nist.gov/glossary/term/local_access