Description

Article explains, what exactly is meant by local access in terms of computer networking.

Symptoms

In CVE-2023-44194 description

https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-An-unauthenticated-attacker-with-local-access-to-the-device-can-create-a-backdoor-with-root-privileges-CVE-2023-44194?language=en_US

 

there is this bit of text:

"allows an unauthenticated attacker with local access to the device"

 

and I need to know the definition of "local access"?

 

are we "safe" if the equipment is in an access-controlled room and unauthorized people have no way of physically touching the equipment?

is "local access" the ability to reach the management IP/control plane of the device?

or is it something else?

Solution

Checked and couldn't find any further explanation on the "local access to the device" part, but In Networks, local access generally means access to the device without any network (that implies, physical access to the device).

 

So if you have security measures that prevent the unauthorized physical access to the device, you are safe from this CVE-2023-44194.

 

Local access- Access to an organizational system by a user (or process acting on behalf of a user) communicating through a direct connection without the use of a network.

Reference: https://csrc.nist.gov/glossary/term/local_access

 

Modification History

2025-03-26 : Article Created