Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
None
Privileges Required
None
Attack Vector
Adjacent_network
0

CVE-2024-30388

Disclosure Date: April 12, 2024
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on QFX5000 Series and EX Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).

If a specific malformed LACP packet is received by a QFX5000 Series, or an EX4400, EX4100 or EX4650 Series device, an LACP flap will occur resulting in traffic loss.
This issue affects Junos OS on QFX5000 Series, and on EX4400, EX4100 or EX4650 Series:

  • 20.4 versions from

20.4R3-S4

before 20.4R3-S8,

  • 21.2 versions from

21.2R3-S2

before 21.2R3-S6,

  • 21.4 versions from

21.4R2

before 21.4R3-S4,

  • 22.1 versions from

22.1R2

before 22.1R3-S3,

  • 22.2 versions before 22.2R3-S1,
  • 22.3 versions before 22.3R2-S2, 22.3R3,
  • 22.4 versions before 22.4R2-S1, 22.4R3.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
6.5 Medium
Impact Score:
3.6
Exploitability Score:
2.8
Vector:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector (AV):
Adjacent_network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
High

General Information

Vendors

  • Juniper Networks

Products

  • Junos OS

Additional Info

Technical Analysis