CVE-2023-28985

Summary

CVE-2023-28985 is a new vulnerability affecting Juniper Networks SRX Series and MX Series devices. This issue involves an Improper Validation of Syntactic Correctness of Input in the Intrusion Detection and Prevention (IDP) system. An unauthenticated, network-based attacker can exploit this vulnerability by sending a malformed SSL packet to cause a Denial of Service (DoS) condition. The SSL detector on these devices crashes upon receipt of such packets, leading to a sustained DoS. This issue affects Juniper Networks SRX Series and MX Series platforms where IDP is enabled and prior to SigPack 3598. To identify the current SigPack version, users can execute the command 'show security idp security-package-version'.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.