← Back

CVE-2023-44198

nvd nist
Published: Oct 13, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a specifically malformed SIP packet, the device prevents this packet from being forwarded, but any subsequently received retransmissions of the same packet are forwarded as if they were valid. This issue affects Juniper Networks Junos OS on SRX Series and MX Series: * 20.4 versions prior to 20.4R3-S5; * 21.1 versions prior to 21.1R3-S4; * 21.2 versions prior to 21.2R3-S4; * 21.3 versions prior to 21.3R3-S3; * 21.4 versions prior to 21.4R3-S2; * 22.1 versions prior to 22.1R2-S2, 22.1R3; * 22.2 versions prior to 22.2R2-S1, 22.2R3; * 22.3 versions prior to 22.3R1-S2, 22.3R2. This issue doesn't not affected releases prior to 20.4R1.

Affected (70)

Products: Juniper: Junos
1 product
Junos
Configuration A
70 vulnerable · 28 platform
Vulnerable SoftwareAffected Versions
Juniper
Before 20.4
Version 20.4
Version 20.4 r1-s1
Version 20.4 r1
Version 20.4 r2-s1
Version 20.4 r2-s2
Version 20.4 r2
Version 20.4 r3-s1
Version 20.4 r3-s2
Version 20.4 r3-s3
Version 20.4 r3-s4
Version 20.4 r3
Version 21.1
Version 21.1 r1-s1
Version 21.1 r1
Version 21.1 r2-s1
Version 21.1 r2-s2
Version 21.1 r2
Version 21.1 r3-s1
Version 21.1 r3-s2
Version 21.1 r3-s3
Version 21.1 r3
Version 21.2
Version 21.2 r1-s1
Version 21.2 r1-s2
Version 21.2 r1
Version 21.2 r2-s1
Version 21.2 r2-s2
Version 21.2 r2
Version 21.2 r3-s1
Version 21.2 r3-s2
Version 21.2 r3-s3
Version 21.2 r3
Version 21.3
Version 21.3 r1-s1
Version 21.3 r1-s2
Version 21.3 r1
Version 21.3 r2-s1
Version 21.3 r2-s2
Version 21.3 r2
Version 21.3 r3-s1
Version 21.3 r3-s2
Version 21.3 r3
Version 21.4
Version 21.4 r1-s1
Version 21.4 r1-s2
Version 21.4 r1
Version 21.4 r2-s1
Version 21.4 r2-s2
Version 21.4 r2
Version 21.4 r3-s1
Version 21.4 r3
Version 22.1
Version 22.1 r1-s1
Version 22.1 r1-s2
Version 22.1 r1
Version 22.1 r2-s1
Version 22.1 r2
Version 22.1 r3-s1
Version 22.1 r3
Version 22.2
Version 22.2 r1-s1
Version 22.2 r1-s2
Version 22.2 r1
Version 22.2 r2-s1
Version 22.2 r2
Version 22.3
Version 22.3 r1-s1
Version 22.3 r1-s2
Version 22.3 r1
Running on/withPlatform Versions
Juniper
Mx10003
All versions
Juniper
Mx10004
All versions
Juniper
Mx10008
All versions
Juniper
Mx2008
All versions
Juniper
Mx2010
All versions
Juniper
Mx2020
All versions
Juniper
Mx204
All versions
Juniper
Mx240
All versions
Juniper
Mx304
All versions
Juniper
Mx480
All versions
Juniper
Mx960
All versions
Juniper
Srx1500
All versions
Juniper
Srx1600
All versions
Juniper
Srx2300
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx345
All versions
Juniper
Srx380
All versions
Juniper
Srx4100
All versions
Juniper
Srx4200
All versions
Juniper
Srx4300
All versions
Juniper
Srx4600
All versions
Juniper
Srx4700
All versions
Juniper
Srx5400
All versions
Juniper
Srx550
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.