Vulnerability in Juniper Acx7024
CVE-2024-39519
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). On all ACX 7000 Series platforms running Junos OS Evolved, and configured with IRBs, if a Customer Edge device (CE) device is dual homed to two Provider Edge devices (PE) a traffic loop will occur when the CE sends multicast packets. This issue can be triggered by IPv4 and IPv6 traffic. This issue affects Junos OS Evolved: All versions from 22.2R1-EVO and later versions before 22.4R2-EVO, This issue does not affect Junos OS Evolved versions before 22.1R1-EVO.
EPSS: 0.002 (16.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Juniper Acx7024
- Juniper Acx7024x
- Juniper Acx7100-32c
- Juniper Acx7100-48l
- Juniper Acx7332
- Juniper Acx7348
- Juniper Acx7509
- Juniper Junos_os_evolved — versions 22.4
- Juniper Networks Junos Os Evolved — versions 22.1-EVO, 0, 22.2-EVO
Weakness classification (CWE)
Public proof-of-concept exploits
References
- sirt@juniper.net (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2024-39519?
- CVE-2024-39519 is a medium-severity vulnerability in Juniper Acx7024, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 6.5/10. Published 2024-07-11.
- How severe is CVE-2024-39519?
- Medium severity. CVSS v3 base score is 6.5 out of 10.
- Is CVE-2024-39519 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.