CVE-2023-44195

Summary

CVE-2023-44195 is a vulnerability in Juniper Networks Junos OS Evolved's NetworkStack agent daemon (nsagentd) that allows unauthenticated network attackers to cause limited Denial-of-Service (DoS) and potential unauthorized access. The issue arises due to an Improper Restriction of Communication Channel to Intended Endpoints issue, which allows specific malicious packets to bypass firewall filters and reach the Routing-Engine, causing increased resource consumption and potential access. This vulnerability requires the presence of CVE-2023-44196 as a prerequisite. Affected versions include 21.3-EVO prior to 21.3R3-S5-EVO, 21.4-EVO prior to 21.4R3-S4-EVO, 22.1-EVO and later, 22.2-EVO and later, 22.3-EVO versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO, and 22.4-EVO versions prior to 22.4R3-EVO. Junos OS Evolved versions prior to 21.3R1-EVO are not affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.