7.5
CVSSv3

CVE-2023-22401

Published: 13/01/2023 Updated: 24/01/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based malicious user to cause a Denial of Service (DoS). On the PTX10008 and PTX10016 platforms running Junos OS or Junos OS Evolved, when a specific SNMP MIB is queried this will cause a PFE crash and the FPC will go offline and not automatically recover. A system restart is required to get the affected FPC in an operational state again. This issue affects: Juniper Networks Junos OS 22.1 version 22.1R2 and later versions; 22.1 versions before 22.1R3; 22.2 versions before 22.2R2. Juniper Networks Junos OS Evolved 21.3-EVO version 21.3R3-EVO and later versions; 21.4-EVO version 21.4R1-S2-EVO, 21.4R2-EVO and later versions before 21.4R2-S1-EVO; 22.1-EVO version 22.1R2-EVO and later versions before 22.1R3-EVO; 22.2-EVO versions before 22.2R1-S1-EVO, 22.2R2-EVO.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 22.1

juniper junos os evolved 21.4

juniper junos 22.2

juniper junos os evolved 22.2

juniper junos os evolved 21.3

juniper junos os evolved 22.1