CVE-2023-36843
CVSS Score of 10 (low)
Details
Summary
CVE-2023-36843 is an Improper Handling of Inconsistent Special Elements vulnerability in the Junos Services Framework (jsf) module of Juniper Networks Junos OS. It allows an unauthenticated network-based attacker to cause a crash in the Packet Forwarding Engine (pfe), resulting in a Denial of Service (DoS) condition. This vulnerability affects Juniper Networks Junos OS versions prior to 20.4R3-S8, 20.4R3-S9, 21.1 version 21.1R1 and later versions, 21.2 versions prior to 21.2R3-S6, and various other versions listed in the text. Devices with Juniper Networks Advanced Threat Prevention (ATP) Cloud enabled with Encrypted Traffic Insights are impacted by this vulnerability. To remediate the issue, manual restart of affected devices is required. The potential danger this vulnerability poses to organizations is a potential disruption of network services due to the Denial of Service caused by the crash in the Packet Forwarding Engine.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions