TROYANOSYVIRUS
Retour aux CVEs

CVE-2023-28976

HIGH
7.5

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). If specific traffic is received on MX Series and its rate exceeds the respective DDoS protection limit the ingress PFE will crash and restart. Continued receipt of this traffic will create a sustained DoS condition. This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 19.1R3-S10; 19.2 versions prior to 19.2R3-S7; 19.3 versions prior to 19.3R3-S8; 19.4 versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S5; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S5; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2.

Details CVE

Score CVSS v3.17.5
SeveriteHIGH
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie4/17/2023
Derniere modification11/21/2024
Sourcenvd
Observations honeypot0

Produits affectes

juniper:junosjuniper:mxjuniper:mx10juniper:mx10000juniper:mx10003juniper:mx10008juniper:mx10016juniper:mx104juniper:mx150juniper:mx2008juniper:mx2010juniper:mx2020juniper:mx204juniper:mx240juniper:mx40juniper:mx480juniper:mx5juniper:mx80juniper:mx960

Faiblesses (CWE)

CWE-754

References

https://supportportal.juniper.net/JSA70601(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.