What is CVE-2022-22203?

CVE-2022-22203 is a medium-severity vulnerability in Juniper Ex4600, classified under Incorrect Comparison. CVSS score: 6.5/10. Published 2022-07-20.

How severe is CVE-2022-22203?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Juniper Ex4600

CVE-2022-22203

An Incorrect Comparison vulnerability in PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). On QFX5000 Series, and EX4600 and EX4650 platforms, the fxpc process will crash followed by the FPC reboot upon receipt of a specific hostbound packet. Continued receipt of these specific packets will create a sustained Denial of Service (DoS) condition. This issue only affects Juniper Networks Junos OS 19.4 version 19.4R3-S4.

EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-697 — Incorrect Comparison

References

sirt@juniper.net (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2022-22203?: CVE-2022-22203 is a medium-severity vulnerability in Juniper Ex4600, classified under Incorrect Comparison. CVSS score: 6.5/10. Published 2022-07-20.
How severe is CVE-2022-22203?: Medium severity. CVSS v3 base score is 6.5 out of 10.