CVE-2024-21597

CVSS V2 None CVSS V3 None

Description

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric (AF) scenario if routing-instances (RI) are configured, specific valid traffic destined to the device can bypass the configured lo0 firewall filters as it's received in the wrong RI context. This issue affects Juniper Networks Junos OS on MX Series: * All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S3; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3; * 22.2 versions earlier than 22.2R3; * 22.3 versions earlier than 22.3R2.

Overview

CVE ID
CVE-2024-21597

Assigner
juniper

Vulnerability Status
PUBLISHED

Published Version
2024-01-12T00:53:07.122Z

Last Modified Date
2024-01-12T00:53:07.122Z

Weakness Enumerations

CWE	URL
CWE-668	http://cwe.mitre.org/data/definitions/668.html

References

Reference URL	Reference Tags
https://supportportal.juniper.net/JSA75738	vendor-advisory
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N	technical-description

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-21597
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21597

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 15:15:57				Added to TrackCVE