What is CVE-2024-21586?

CVE-2024-21586 is a high-severity vulnerability in Juniper Junos, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2024-07-01.

How severe is CVE-2024-21586?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Juniper Junos

CVE-2024-21586

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series and NFX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Se…

EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Junos — versions 21.4, 22.1, 22.2
Juniper Nfx150
Juniper Nfx250
Juniper Nfx350
Juniper Srx1500
Juniper Srx1600
Juniper Srx2300
Juniper Srx300
Juniper Srx320
Juniper Srx340

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

sirt@juniper.net (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-21586?: CVE-2024-21586 is a high-severity vulnerability in Juniper Junos, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2024-07-01.
How severe is CVE-2024-21586?: High severity. CVSS v3 base score is 7.5 out of 10.