An insufficient verification of data authenticity flaw in Juniper Networks Session Smart Router and Session Smart Conductor permits an attacker who can write to the model cache directory to supply tampered cache files. When the device processes these files without integrity checks, the attacker can cause arbitrary code to run on the device, thereby gaining elevated privileges and potentially taking full control of the system.

The vulnerability affects Juniper Networks Session Smart Router and Session Smart Conductor firmware versions 7.0.5 and later, 7.1.7 and later, and 7.2.3 and later, as identified by the vendor advisory.

The flaw carries a CVSS score of 8.8, indicating a high severity of impact. The EPSS score is not available, so the historical exploitation frequency is unknown, and the issue is not listed in the CISA KEV catalog, implying no known widespread exploitation. The most likely attack scenario requires the attacker to obtain write permissions to the model cache directory, either locally or through a compromised management interface; once this is achieved, the attacker can trigger code execution. The overall risk is significant, especially for devices with loosely controlled file permissions or exposed management interfaces.