What is CVE-2024-21590?

CVE-2024-21590 is a medium-severity vulnerability in Juniper Junos_os_evolved, classified under Improper Input Validation. CVSS score: 5.3/10. Published 2024-04-12.

How severe is CVE-2024-21590?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Improper input validation in Juniper Junos_os_evolved

CVE-2024-21590

An Improper Input Validation vulnerability in Juniper Tunnel Driver (jtd) and ICMP module of Juniper Networks Junos OS Evolved allows an unauthenticated attacker within the MPLS administrative domain to send specifically crafted packets to…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (28.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Junos_os_evolved — versions 21.2, 21.4, 22.2
Juniper Networks Junos Os Evolved — versions 0, 21.4-EVO, 22.2-EVO

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

sirt@juniper.net (vendor-advisory, Vendor Advisory)
sirt@juniper.net (technical-description, Issue Tracking)

Frequently asked questions

What is CVE-2024-21590?: CVE-2024-21590 is a medium-severity vulnerability in Juniper Junos_os_evolved, classified under Improper Input Validation. CVSS score: 5.3/10. Published 2024-04-12.
How severe is CVE-2024-21590?: Medium severity. CVSS v3 base score is 5.3 out of 10.