Riskcovery

CVE-2023-44196

Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE

State
Published
Severity
6.5 Medium
Published
Oct 12, 2023
Updated
Sep 18, 2024
Reserved
Sep 26, 2023

Read the record on cve.org

Description

An Improper Check for Unusual or Exceptional Conditions in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS Evolved on PTX10003 Series allows an unauthenticated adjacent attacker to cause an impact to the integrity of the system.

When specific transit MPLS packets are received by the PFE, these packets are internally forwarded to the RE. This issue is a prerequisite for CVE-2023-44195.

This issue affects Juniper Networks Junos OS Evolved:

* All versions prior to 20.4R3-S8-EVO; * 21.1-EVO version 21.1R1-EVO and later; * 21.2-EVO versions prior to 21.2R3-S6-EVO; * 21.3-EVO version 21.3R1-EVO and later; * 21.4-EVO versions prior to 21.4R3-S3-EVO; * 22.1-EVO versions prior to 22.1R3-S4-EVO; * 22.2-EVO versions prior to 22.2R3-S3-EVO; * 22.3-EVO versions prior to 22.3R2-S2-EVO, 22.3R3-EVO; * 22.4-EVO versions prior to 22.4R2-EVO.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Njuniper

Weaknesses

  • CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

ProductVersions
Junos OS EvolvedJuniper Networks
  • before 20.4R3-S8-EVOAffected
  • 21.1R1-EVO to before 21.1*-EVOAffected
  • 21.2-EVO to before 21.2R3-S6-EVOAffected
  • 21.3R1-EVO to before 21.3*-EVOAffected
  • 21.4-EVO to before 21.4R3-S3-EVOAffected
  • 22.1-EVO to before 22.1R3-S4-EVOAffected
  • 22.2-EVO to before 22.2R3-S3-EVOAffected
  • 22.3-EVO to before 22.3R2-S2-EVO, 22.3R3-EVOAffected
  • 22.4-EVO to before 22.4R2-EVOAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.