CVE-2023-44196

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Oct 13, 2023
Updated: Oct 20, 2023
CWE ID 754

Summary

CVE-2023-44196 is a vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS Evolved on PTX10003 Series. It allows unauthenticated adjacent attackers to disrupt the system's integrity by exploiting an improper check for unusual or exceptional conditions in specific transit MPLS packets. This issue is a prerequisite for CVE-2023-44195. Affected versions include all prior to 20.4R3-S8-EVO, 21.1R1-EVO and later, 21.2R3-S6-EVO and earlier, 21.3R1-EVO and later, 21.4R1-EVO and prior to 21.4R3-S3-EVO, 22.1R1-EVO and prior to 22.1R3-S4-EVO, 22.2R1-EVO and prior to 22.2R3-S3-EVO, 22.3R1-EVO and prior to 22.3R2-S2-EVO and 22.3R3-EVO, and 22.4R1-EVO and prior to 22.4R2-EVO.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Juniper Junos Os Evolved

Affected Vendors

  • Juniper Networks