CVE-2024-47507

Katalog CVE

CVSS 5.8 · Medium EPSS 0,29%

Kerentanan Improper Check for Unusual or Exceptional Conditions pada juniper junos, juniper junos os evolved. Skor CVSS 3.1 5.8 (Medium) menurut juniper.net.

Deskripsi (NVD)

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an integrity impact to the downstream devices. When a peer sends a BGP update message which contains the aggregator attribute with an ASN value of zero (0), rpd accepts and propagates this attribute, which can cause issues for downstream BGP peers receiving this. This issue affects: Junos OS: * All versions before 21.4R3-S6, * 22.2 versions before 22.2R3-S3, * 22.4 versions before 22.4R3;  Junos OS Evolved:  * All versions before 21.4R3-S7-EVO, * 22.2 versions before 22.2R3-S4-EVO, * 22.4 versions before 22.4R3-EVO.

Rincian

Terbit di NVD

11 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.8 (Medium), sumber juniper.net
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-754: Improper Check for Unusual or Exceptional Conditions

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 20,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 64 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://supportportal.juniper.net/JSA88138 advisory vendor