Juniper Networks Junos OS Evolved prior 22.1R1-EVO/22.4R2-EVO on ACX7000 Packet Forwarding Engine unusual condition

Summaryinfo

A vulnerability identified as critical has been detected in Juniper Networks Junos OS Evolved on ACX7000. The affected element is an unknown function of the component Packet Forwarding Engine. This manipulation causes unusual condition. The identification of this vulnerability is CVE-2024-39519. The attack needs to be done within the local network. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as critical was found in Juniper Networks Junos OS Evolved on ACX7000. Affected by this vulnerability is some unknown functionality of the component Packet Forwarding Engine. The manipulation with an unknown input leads to a unusual condition vulnerability. The CWE definition for the vulnerability is CWE-754. The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product. As an impact it is known to affect availability. The summary by CVE is:

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). On all ACX 7000 Series platforms running Junos OS Evolved, and configured with IRBs, if a Customer Edge device (CE) device is dual homed to two Provider Edge devices (PE) a traffic loop will occur when the CE sends multicast packets. This issue can be triggered by IPv4 and IPv6 traffic. This issue affects Junos OS Evolved:  All versions from 22.2R1-EVO and later versions before 22.4R2-EVO, This issue does not affect Junos OS Evolved versions before 22.1R1-EVO.

The advisory is shared at supportportal.juniper.net. This vulnerability is known as CVE-2024-39519 since 06/25/2024. The exploitation appears to be easy. The attack can only be initiated within the local network. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/23/2024).

Upgrading to version 22.1R1-EVO or 22.4R2-EVO eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Juniper Networks

Name

• Junos OS Evolved

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion