CVE-2024-21586
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-21586 is a Denial-of-Service (DoS) vulnerability affecting the Packet Forwarding Engine (PFE) in Juniper Networks Junos OS on specific SRX Series and NFX Series. An unauthenticated attacker can exploit this Improper Check for Unusual or Exceptional Conditions flaw by sending specific valid traffic to a device, causing the PFE to crash and restart. This results in a sustained DoS condition if the traffic continues to be received and processed. The affected Junos OS versions on SRX Series include those before 21.4R3-S7.9, 22.1 versions before 22.1R3-S5.3, 22.2 versions before 22.2R3-S4.11, 22.3 versions before 22.3R3, and 22.4 versions before 22.4R3. For NFX Series, the impacted versions are 21.4 versions before 21.4R3-S8, 22.1 versions after 22.1R1, 22.2 versions before 22.2R3-S5, 22.3 versions before 22.3R3, and 22.4 versions before 22.4R3. Junos OS versions prior to 21.4R1 are not affected by this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Juniper Junos
Affected Vendors
- Juniper Networks
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions