CVE-2024-47498
7.1
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow more
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: sirt@juniper.net (Secondary)
Description
An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).
Several configuration statements meant to enforce limits on MAC learning and moves can be configured but do not take effect. This can lead to control plane overload situations which will severely impact the ability of the device to processes legitimate traffic.
This issue affects Junos OS Evolved on QFX5000 Series:
* All versions before 21.4R3-S8-EVO,
* 22.2-EVO versions before 22.2R3-S5-EVO,
* 22.4-EVO versions before 22.4R3-EVO,
* 23.2-EVO versions before 23.2R2-EVO.
Affected (39)
Products: Juniper: Junos Os Evolved
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 21.4 |
| Running on/with | Platform Versions |
|---|---|
Juniper Qfx5110 | All versions |
Juniper Qfx5120 | All versions |
Juniper Qfx5130 | All versions |
Juniper Qfx5200 | All versions |
Juniper Qfx5210 | All versions |
Juniper Qfx5220 | All versions |
Juniper Qfx5230 64cd | All versions |
Juniper Qfx5240 | All versions |
Juniper Qfx5241 | All versions |
Juniper Qfx5700 | All versions |
References (1)
Timeline
No history available yet.