What is CVE-2023-44185?

CVE-2023-44185 is a high-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2023-10-13.

How severe is CVE-2023-44185?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Juniper Junos

CVE-2023-44185

An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of Service (DoS )to the device upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet. Continued receipt of this packet will cause a sustained Denial of Service condition. This issue affects: * Juniper Networks Junos OS: * All versions prior to 20.4R3-S6; * 21.1 versions prior to 21.1R3-S5; * 21.2 versions prior to 21.2R3-S4; * 21.3 versions prior to 21.3R3-S3; * 21.4 versions prior to 21.4R3-S3; * 22.1 versions prior to 22.1R2-S2, 22.1R3; * 22.2 versions prior to 22.2R2-S1, 22.2R3; * 22.3 versions prior to 22.3R1-S2, 22.3R2. Juniper Networks Junos OS Evolved: * All versions prior to 20.4R3-S6-EVO; * 21.1-EVO version 21.1R1-EVO and later versions prior to 21.2R3-S4-EVO; * 21.3-EVO versions prior to 21.3R3-S3-EVO; * 21.4-EVO versions prior to 21.4R3-S3-EVO; * 22.1-EVO versions prior to 22.1R3-EVO; * 22.2-EVO versions prior to 22.2R2-S1-EVO, 22.2R3-EVO; * 22.3-EVO versions prior to 22.3R1-S2-EVO, 22.3R2-EVO.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Published 2023-10-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.005 (41.8th percentile), scored 2026-10-03.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 42nd percentile — 41.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000

Affected products

Juniper Junos — versions 20.4, 21.1, 21.2
Juniper Junos OS Evolved — versions 20.4, 21.1, 21.2
Juniper Networks Junos OS — versions 0, 21.1, 21.2
Juniper Networks Junos OS Evolved — versions 0, 21.1R1-EVO, 21.2-EVO

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

supportportal.juniper.net/JSA73146 (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-44185?: CVE-2023-44185 is a high-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2023-10-13.
How severe is CVE-2023-44185?: High severity. CVSS v3 base score is 7.5 out of 10.