CVE-2022-22203

Published: Jul 20, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An Incorrect Comparison vulnerability in PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). On QFX5000 Series, and EX4600 and EX4650 platforms, the fxpc process will crash followed by the FPC reboot upon receipt of a specific hostbound packet. Continued receipt of these specific packets will create a sustained Denial of Service (DoS) condition. This issue only affects Juniper Networks Junos OS 19.4 version 19.4R3-S4.

Affected (1)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

1 vulnerable · 10 platform

Vulnerable Software	Affected Versions
Juniper Junos	Version 19.4 r3-s4

Running on/with	Platform Versions
Juniper Ex4600	All versions
Juniper Ex4650	All versions
Juniper Qfx5100	All versions
Juniper Qfx5110	All versions
Juniper Qfx5120	All versions
Juniper Qfx5130	All versions
Juniper Qfx5200	All versions
Juniper Qfx5210	All versions
Juniper Qfx5220	All versions
Juniper Qfx5700	All versions

Related CWEs

CWE-697

Incorrect Comparison

The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

References (2)

https://kb.juniper.net/JSA69707

Source: sirt@juniper.net

Vendor Advisory

https://kb.juniper.net/JSA69707

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.