CVE-2023-44184
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-44184 is a vulnerability affecting Juniper Networks Junos OS and Junos OS Evolved that allows authenticated, low-privileged attackers to cause a Denial of Service to the device's control plane via a specific NETCONF command. Affected versions include all releases prior to 20.4R3-S7, 21.2 versions prior to 21.2R3-S5, and various other versions. The vulnerability arises from an Improper Restriction of Operations within the Bounds of a Memory Buffer, leading to high CPU usage by the mgd process. To identify potential compromise, check for persistent NETCONF client connections and high WCPU percentages for the mgd process. No specific command exists to directly view active NETCONF sessions, but logs for UI_LOG_EVENT with "client-mode 'netconf'" can be reviewed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions