csirt@kutim:~/threat-intel/cve/CVE-2026-21913

Katalog CVE

CVSS 7.5 · High EPSS 0,41%

Kerentanan Improper Initialization pada juniper junos. Skor CVSS 3.1 7.5 (High) menurut juniper.net.

Deskripsi (NVD)

An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On EX4000 models with 48 ports (EX4000-48T, EX4000-48P, EX4000-48MP) a high volume of traffic destined to the device will cause an FXPC crash and restart, which leads to a complete service outage until the device has automatically restarted. The following reboot reason can be seen in the output of 'show chassis routing-engine' and as a log message:   reason=0x4000002 reason_string=0x4000002:watchdog + panic with core dump This issue affects Junos OS on EX4000-48T, EX4000-48P and EX4000-48MP: * 24.4 versions before 24.4R2, * 25.2 versions before 25.2R1-S2, 25.2R2. This issue does not affect versions before 24.4R1 as the first Junos OS version for the EX4000 models was 24.4R1.

Rincian

Terbit di NVD
15 Januari 2026
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.5 (High), sumber juniper.net
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-665: Improper Initialization
EPSS (30 hari)
0,41% peluang dieksploitasi; lebih tinggi dari 33,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper junos Versi 24.4
juniper junos Versi 24.4 r1
juniper junos Versi 24.4 r1-s2
juniper junos Versi 24.4 r1-s3
juniper junos Versi 25.2
juniper junos Versi 25.2 r1
juniper junos Versi 25.2 r1-s1
juniper junos Versi 25.2 r2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.