6.5
CVSSv3

CVE-2022-22160

Published: 19/01/2022 Updated: 28/01/2022
CVSS v2 Base Score: 2.9 | Impact Score: 2.9 | Exploitability Score: 5.5
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 259
Vector: AV:A/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

An Unchecked Error Condition vulnerability in the subscriber management daemon (smgd) of Juniper Networks Junos OS allows an unauthenticated adjacent malicious user to cause a crash of and thereby a Denial of Service (DoS). In a subscriber management / broadband edge environment if a single session group configuration contains dual-stack and a pp0 interface, smgd will crash and restart every time a PPPoE client sends a specific message. This issue affects Juniper Networks Junos OS on MX Series: 16.1 version 16.1R1 and later versions before 18.4R3-S10; 19.1 versions before 19.1R2-S3, 19.1R3-S7; 19.2 versions before 19.2R1-S8, 19.2R3-S4; 19.3 versions before 19.3R3-S4; 19.4 versions before 19.4R3-S5; 20.1 versions before 20.1R3-S3; 20.2 versions before 20.2R3-S3; 20.3 versions before 20.3R3-S2; 20.4 versions before 20.4R3; 21.1 versions before 21.1R3; 21.2 versions before 21.2R2. This issue does not affect Juniper Networks Junos OS versions before 16.1R1.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 16.1

juniper junos 16.1x65

juniper junos 16.1x70

juniper junos 16.2

juniper junos 17.1

juniper junos 17.2

juniper junos 17.2x75

juniper junos 17.3

juniper junos 17.4

juniper junos 17.4r2

juniper junos 18.1

juniper junos 18.1x75

juniper junos 18.2

juniper junos 18.2x75

juniper junos 18.2x75-d10

juniper junos 18.2x75-d30

juniper junos 18.3

juniper junos 18.4

juniper junos 19.1

juniper junos 19.2

juniper junos 19.3

juniper junos 19.4

juniper junos 20.1

juniper junos 20.2

juniper junos 20.3

juniper junos 20.4

juniper junos 21.1

juniper junos 21.2