← Back

CVE-2024-47507

nvd nist
Published: Oct 11, 2024Modified: Jan 26, 2026

JSON object

Loading...
6.9
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:XShow less
Source: sirt@juniper.net (Secondary)

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an integrity impact to the downstream devices. When a peer sends a BGP update message which contains the aggregator attribute with an ASN value of zero (0), rpd accepts and propagates this attribute, which can cause issues for downstream BGP peers receiving this. This issue affects: Junos OS: * All versions before 21.4R3-S6, * 22.2 versions before 22.2R3-S3, * 22.4 versions before 22.4R3;  Junos OS Evolved:  * All versions before 21.4R3-S7-EVO, * 22.2 versions before 22.2R3-S4-EVO, * 22.4 versions before 22.4R3-EVO.

Affected (64)

Juniper
2 products
Junos
Junos Os Evolved
Configuration A
64 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Junos
Before 21.4
Junos
Version 21.4
Junos
Version 21.4 r1-s1
Junos
Version 21.4 r1-s2
Junos
Version 21.4 r1
Junos
Version 21.4 r2-s1
Junos
Version 21.4 r2-s2
Junos
Version 21.4 r2
Junos
Version 21.4 r3-s1
Junos
Version 21.4 r3-s2
Junos
Version 21.4 r3-s3
Junos
Version 21.4 r3-s4
Junos
Version 21.4 r3-s5
Junos
Version 21.4 r3
Junos
Version 22.2
Junos
Version 22.2 r1-s1
Junos
Version 22.2 r1-s2
Junos
Version 22.2 r1
Junos
Version 22.2 r2-s1
Junos
Version 22.2 r2-s2
Junos
Version 22.2 r2
Junos
Version 22.2 r3-s1
Junos
Version 22.2 r3-s2
Junos
Version 22.2 r3
Junos
Version 22.4
Junos
Version 22.4 r1-s1
Junos
Version 22.4 r1-s2
Junos
Version 22.4 r1
Junos
Version 22.4 r2-s1
Junos
Version 22.4 r2-s2
Junos
Version 22.4 r2
Juniper
Junos Os Evolved
Before 21.4
Junos Os Evolved
Version 21.4
Junos Os Evolved
Version 21.4 r1-s1
Junos Os Evolved
Version 21.4 r1-s2
Junos Os Evolved
Version 21.4 r1
Junos Os Evolved
Version 21.4 r2-s1
Junos Os Evolved
Version 21.4 r2-s2
Junos Os Evolved
Version 21.4 r2
Junos Os Evolved
Version 21.4 r3-s1
Junos Os Evolved
Version 21.4 r3-s2
Junos Os Evolved
Version 21.4 r3-s3
Junos Os Evolved
Version 21.4 r3-s4
Junos Os Evolved
Version 21.4 r3-s5
Junos Os Evolved
Version 21.4 r3-s6
Junos Os Evolved
Version 21.4 r3
Junos Os Evolved
Version 22.2
Junos Os Evolved
Version 22.2 r1-s1
Junos Os Evolved
Version 22.2 r1-s2
Junos Os Evolved
Version 22.2 r1
Junos Os Evolved
Version 22.2 r2-s1
Junos Os Evolved
Version 22.2 r2-s2
Junos Os Evolved
Version 22.2 r2
Junos Os Evolved
Version 22.2 r3-s1
Junos Os Evolved
Version 22.2 r3-s2
Junos Os Evolved
Version 22.2 r3-s3
Junos Os Evolved
Version 22.2 r3
Junos Os Evolved
Version 22.4
Junos Os Evolved
Version 22.4 r1-s1
Junos Os Evolved
Version 22.4 r1-s2
Junos Os Evolved
Version 22.4 r1
Junos Os Evolved
Version 22.4 r2-s1
Junos Os Evolved
Version 22.4 r2-s2
Junos Os Evolved
Version 22.4 r2

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (1)

Source: sirt@juniper.net
Vendor Advisory

Timeline

No history available yet.