1. Home
  2. CVE Database
  3. CVE-2024-39533
MEDIUM · 5.8

CVE-2024-39533

An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an unauthenticated, network-based attacker to cause a minor inte...

Vulnerability Description

An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an unauthenticated, network-based attacker to cause a minor integrity impact to downstream networks.If one or more of the following match conditions ip-source-address ip-destination-address arp-type which are not supported for this type of filter, are used in an ethernet switching filter, and then this filter is applied as an output filter, the configuration can be committed but the filter will not be in effect. This issue affects Junos OS on QFX5000 Series and EX4600 Series: * All version before 21.2R3-S7,  * 21.4 versions before 21.4R3-S6, * 22.1 versions before 22.1R3-S5, * 22.2 versions before 22.2R3-S3, * 22.3 versions before 22.3R3-S2,  * 22.4 versions before 22.4R3, * 23.2 versions before 23.2R2. Please note that the implemented fix ensures these unsupported match conditions cannot be committed anymore.

CVSS Score

5.8

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
JuniperJunos< 21.2
JuniperEx4600-
JuniperEx4650-
JuniperQfx5110-
JuniperQfx5120-
JuniperQfx5130-
JuniperQfx5200-
JuniperQfx5210-
JuniperQfx5220-
JuniperQfx5230-64Cd-
JuniperQfx5240-
JuniperQfx5241-
JuniperQfx5700-

Related Weaknesses (CWE)

CWE-447

References

FAQ

What is CVE-2024-39533?

CVE-2024-39533 is a vulnerability with a CVSS score of 5.8 (MEDIUM). An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an unauthenticated, network-based attacker to cause a minor inte...

How severe is CVE-2024-39533?

CVE-2024-39533 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-39533?

Check the references section above for vendor advisories and patch information. Affected products include: Juniper Junos, Juniper Ex4600, Juniper Ex4650, Juniper Qfx5110, Juniper Qfx5120.