Lucene search

K
vulnrichmentJuniperVULNRICHMENT:CVE-2024-30384
HistoryApr 12, 2024 - 3:22 p.m.

CVE-2024-30384 Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur

2024-04-1215:22:40
CWE-754
juniper
github.com
3
juniper networks junos os
ex4300 series
pfe crashes
cli command
denial-of-service
vulnerability
packet forwarding engine
dos
20.4r3-s10
21.2r3-s7
21.4r3-s6

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS4

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:L

AI Score

6.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on EX4300 Series allows a locally authenticated attacker with low privileges to cause aย Denial-of-Service (Dos).

If a specific CLIย command is issued, aย PFE crash will occur. This will cause traffic forwarding to be interrupted until the system self-recovers.

This issue affects Junos OS:

All versions before 20.4R3-S10,

21.2 versions before 21.2R3-S7,

21.4 versions before 21.4R3-S6.

CNA Affected

[
  {
    "vendor": "Juniper Networks",
    "product": "Junos OS",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "20.4R3-S10",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "21.2",
        "lessThan": "21.2R3-S7",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "21.4",
        "lessThan": "21.4R3-S6",
        "versionType": "semver"
      }
    ],
    "platforms": [
      "EX4300 Series"
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS4

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:L

AI Score

6.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-30384