CVE-2024-47504 — HIGH (7.5)

Vulnerability Description

An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine (pfe) Juniper Networks Junos OS on SRX5000 Series allows an unauthenticated, network based attacker to cause a Denial of Service (Dos). When a non-clustered SRX5000 device receives a specifically malformed packet this will cause a flowd crash and restart. This issue affects Junos OS: * 22.1 releases 22.1R1 and later before 22.2R3-S5, * 22.3 releases before 22.3R3-S4, * 22.4 releases before 22.4R3-S4, * 23.2 releases before 23.2R2-S2, * 23.4 releases before 23.4R2-S1, * 24.2 releases before 24.2R1-S1, 24.2R2. Please note that the PR does indicate that earlier versions have been fixed as well, but these won't be adversely impacted by this.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Juniper	Junos	22.1
Juniper	Srx5400	-
Juniper	Srx5600	-
Juniper	Srx5800	-

Related Weaknesses (CWE)

CWE-1287

References

https://supportportal.juniper.net/JSA88134Vendor Advisory

FAQ

What is CVE-2024-47504?

CVE-2024-47504 is a vulnerability with a CVSS score of 7.5 (HIGH). An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine (pfe) Juniper Networks Junos OS on SRX5000 Series allows an unauthenticated, network based attacker to c...

How severe is CVE-2024-47504?

CVE-2024-47504 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-47504?

Check the references section above for vendor advisories and patch information. Affected products include: Juniper Junos, Juniper Srx5400, Juniper Srx5600, Juniper Srx5800.