CVE-2024-21585
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Summary
CVE-2024-21585 is an Improper Handling of Exceptional Conditions vulnerability in the BGP session processing of Juniper Networks Junos OS and Junos OS Evolved. This vulnerability allows an unauthenticated network-based attacker to cause the routing protocol daemon (rpd) process to crash and restart, leading to a Denial of Service (DoS) condition. The vulnerability affects routers configured with non-stop routing (NSR) enabled and requires Graceful Restart (GR) helper mode to be exploitable. Continued BGP session flapping can result in a sustained DoS condition. The vulnerability has a base severity rating of MEDIUM with a base score of 5.9 and an impact score of 3.6. It affects various versions of Junos OS and Junos OS Evolved prior to specific releases, while NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions