CVE-2023-36843

Summary

CVE-2023-36843 is a vulnerability in Juniper Networks Junos OS, specifically in the Junos Services Framework (jsf) module. This issue allows unauthenticated attackers to send malformed SSL traffic, causing the Packet Forwarding Engine (pfe) to crash, resulting in a Denial of Service (DoS) attack. The vulnerability only affects devices with Juniper Networks Advanced Threat Prevention (ATP) Cloud and Encrypted Traffic Insights enabled, and several versions of Junos OS are impacted, including some versions of 20.4R3, 21.1, 21.2, 21.3, 21.4, 22.1, 22.2, 22.3, and 22.4. A manual restart is required to recover the device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.