CVE-2023-28985
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-28985 is a new vulnerability affecting Juniper Networks SRX Series and MX Series devices. This issue involves an Improper Validation of Syntactic Correctness of Input in the Intrusion Detection and Prevention (IDP) system. An unauthenticated, network-based attacker can exploit this vulnerability by sending a malformed SSL packet to cause a Denial of Service (DoS) condition. The SSL detector on these devices crashes upon receipt of such packets, leading to a sustained DoS. This issue affects Juniper Networks SRX Series and MX Series platforms where IDP is enabled and prior to SigPack 3598. To identify the current SigPack version, users can execute the command 'show security idp security-package-version'.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions