Juniper Junos OS up to 20.4R3-S1/21.2R3-S6/21.4R3-S5 on EX4300 IPv6 Firewall Filter incorrect behavior order

Summaryinfo

A vulnerability marked as problematic has been reported in Juniper Junos OS up to 20.4R3-S1/21.2R3-S6/21.4R3-S5 on EX4300. This affects an unknown part of the component IPv6 Firewall Filter. The manipulation leads to incorrect behavior order. This vulnerability is uniquely identified as CVE-2024-30410. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in Juniper Junos OS up to 20.4R3-S1/21.2R3-S6/21.4R3-S5 on EX4300 and classified as problematic. This issue affects an unknown code of the component IPv6 Firewall Filter. The manipulation with an unknown input leads to a incorrect behavior order vulnerability. Using CWE to declare the problem leads to CWE-696. The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways which may produce resultant weaknesses. Impacted is integrity. The summary by CVE is:

An Incorrect Behavior Order in the routing engine (RE) of Juniper Networks Junos OS on EX4300 Series allows traffic intended to the device to reach the RE instead of being discarded when the discard term is set in loopback (lo0) interface. The intended function is that the lo0 firewall filter takes precedence over the revenue interface firewall filter.  This issue affects only IPv6 firewall filter. This issue only affects the EX4300 switch. No other products or platforms are affected by this vulnerability.  This issue affects Juniper Networks Junos OS: * All versions before 20.4R3-S10, * from 21.2 before 21.2R3-S7, * from 21.4 before 21.4R3-S6. 

The advisory is shared at supportportal.juniper.net. The identification of this vulnerability is CVE-2024-30410 since 03/26/2024. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 02/07/2025).

Upgrading to version 20.4R3-S10, 21.2R3-S7 or 21.4R3-S6 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Juniper

Name

• Junos OS

Version

• 20.4R3-S1
• 21.2R3-S6
• 21.4R3-S5

License

• commercial

Website

• Vendor: https://www.juniper.net/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion