CVE-2023-44195
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Summary
CVE-2023-44195 is a vulnerability in Juniper Networks Junos OS Evolved's NetworkStack agent daemon (nsagentd) that allows unauthenticated network attackers to cause limited Denial-of-Service (DoS) and potential unauthorized access. The issue arises due to an Improper Restriction of Communication Channel to Intended Endpoints issue, which allows specific malicious packets to bypass firewall filters and reach the Routing-Engine, causing increased resource consumption and potential access. This vulnerability requires the presence of CVE-2023-44196 as a prerequisite. Affected versions include 21.3-EVO prior to 21.3R3-S5-EVO, 21.4-EVO prior to 21.4R3-S4-EVO, 22.1-EVO and later, 22.2-EVO and later, 22.3-EVO versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO, and 22.4-EVO versions prior to 22.4R3-EVO. Junos OS Evolved versions prior to 21.3R1-EVO are not affected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Juniper Junos Os Evolved
Affected Vendors
- Juniper Networks
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions