CVE-2024-39534

juniper junos os evolved

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-39534

Katalog CVE

CVSS 5.4 · Medium EPSS 0,66%

Kerentanan Incorrect Comparison pada juniper junos os evolved. Skor CVSS 3.1 5.4 (Medium) menurut juniper.net.

Deskripsi (NVD)

An Incorrect Comparison vulnerability in the local address verification API of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker to create sessions or send traffic to the device using the network and broadcast address of the subnet assigned to an interface. This is unintended and unexpected behavior and can allow an attacker to bypass certain compensating controls, such as stateless firewall filters. This issue affects Junos OS Evolved:  * All versions before 21.4R3-S8-EVO,  * 22.2-EVO before 22.2R3-S4-EVO,  * 22.3-EVO before 22.3R3-S4-EVO,  * 22.4-EVO before 22.4R3-S3-EVO,  * 23.2-EVO before 23.2R2-S1-EVO,  * 23.4-EVO before 23.4R1-S2-EVO, 23.4R2-EVO.

Rincian

Terbit di NVD
11 Oktober 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.4 (Medium), sumber juniper.net
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-697: Incorrect Comparison
EPSS (30 hari)
0,66% peluang dieksploitasi; lebih tinggi dari 50,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper junos os evolved Semua versi sebelum 21.4
juniper junos os evolved Versi 21.4
juniper junos os evolved Versi 21.4 r1
juniper junos os evolved Versi 21.4 r1-s1
juniper junos os evolved Versi 21.4 r1-s2
juniper junos os evolved Versi 21.4 r2
juniper junos os evolved Versi 21.4 r2-s1
juniper junos os evolved Versi 21.4 r2-s2
juniper junos os evolved Versi 21.4 r3
juniper junos os evolved Versi 21.4 r3-s1
juniper junos os evolved Versi 21.4 r3-s2
juniper junos os evolved Versi 21.4 r3-s3
juniper junos os evolved Versi 21.4 r3-s4
juniper junos os evolved Versi 21.4 r3-s5
juniper junos os evolved Versi 21.4 r3-s6
juniper junos os evolved Versi 21.4 r3-s7
juniper junos os evolved Versi 22.2
juniper junos os evolved Versi 22.2 r1
juniper junos os evolved Versi 22.2 r1-s1
juniper junos os evolved Versi 22.2 r1-s2
juniper junos os evolved Versi 22.2 r2
juniper junos os evolved Versi 22.2 r2-s1
juniper junos os evolved Versi 22.2 r2-s2
juniper junos os evolved Versi 22.2 r3
juniper junos os evolved Versi 22.2 r3-s1
juniper junos os evolved Versi 22.2 r3-s2
juniper junos os evolved Versi 22.2 r3-s3
juniper junos os evolved Versi 22.3
juniper junos os evolved Versi 22.3 r1
juniper junos os evolved Versi 22.3 r1-s1
juniper junos os evolved Versi 22.3 r1-s2
juniper junos os evolved Versi 22.3 r2
juniper junos os evolved Versi 22.3 r2-s1
juniper junos os evolved Versi 22.3 r2-s2
juniper junos os evolved Versi 22.3 r3
juniper junos os evolved Versi 22.3 r3-s1
juniper junos os evolved Versi 22.3 r3-s2
juniper junos os evolved Versi 22.3 r3-s3
juniper junos os evolved Versi 22.4
juniper junos os evolved Versi 22.4 r1
juniper junos os evolved Versi 22.4 r1-s1
juniper junos os evolved Versi 22.4 r1-s2
juniper junos os evolved Versi 22.4 r2
juniper junos os evolved Versi 22.4 r2-s1
juniper junos os evolved Versi 22.4 r2-s2
juniper junos os evolved Versi 22.4 r3
juniper junos os evolved Versi 22.4 r3-s1
juniper junos os evolved Versi 22.4 r3-s2
juniper junos os evolved Versi 23.2
juniper junos os evolved Versi 23.2 r1
juniper junos os evolved Versi 23.2 r1-s1
juniper junos os evolved Versi 23.2 r1-s2
juniper junos os evolved Versi 23.2 r2
juniper junos os evolved Versi 23.4
juniper junos os evolved Versi 23.4 r1
juniper junos os evolved Versi 23.4 r1-s1
juniper junos os evolved Versi 23.4 r2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.