“An authentication bypass using an alternate path or channel vulnerability in Juniper Networks Session Smart Router or Conductor running with a redundant peer allows a network-based attacker to bypass authentication and take full control of the device”
CVE-2024-2973 scores a 10 on both CVSS 3.1 and CVSS 4. It only hits routers in high-availability setups with a redundant peer. Juniper shipped the fix outside its normal cycle, and managed routers got it pushed automatically. The redundancy built for uptime is the way in.