What is CVE-2024-21597?

CVE-2024-21597 is a medium-severity vulnerability in Juniper Junos, classified under Exposure of Resource to Wrong Sphere. CVSS score: 5.3/10. Published 2024-01-12.

How severe is CVE-2024-21597?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Juniper Junos

CVE-2024-21597

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric (AF) scenario if routing-instances (RI) are configured, specific valid traffic destined to the device can bypass the configured lo0 firewall filters as it's received in the wrong RI context. This issue affects Juniper Networks Junos OS on MX Series: * All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S3; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3; * 22.2 versions earlier than 22.2R3; * 22.3 versions earlier than 22.3R2.

EPSS: 0.004 (30.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Juniper Junos — versions 20.4, 21.2, 21.4
Juniper Networks Junos Os — versions 0, 21.2, 21.4

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

References

sirt@juniper.net (vendor-advisory, Vendor Advisory)
sirt@juniper.net (technical-description, Third Party Advisory)

Frequently asked questions

What is CVE-2024-21597?: CVE-2024-21597 is a medium-severity vulnerability in Juniper Junos, classified under Exposure of Resource to Wrong Sphere. CVSS score: 5.3/10. Published 2024-01-12.
How severe is CVE-2024-21597?: Medium severity. CVSS v3 base score is 5.3 out of 10.