Juniper QFX5000 CLI UI DoS via MAC limit config < 21.4R3 EVO
CVE-2024-47498 Published on October 11, 2024
Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect
An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).
Several configuration statements meant to enforce limits on MAC learning and moves can be configured but do not take effect. This can lead to control plane overload situations which will severely impact the ability of the device to processes legitimate traffic.
This issue affects Junos OS Evolved on QFX5000 Series:
* All versions before 21.4R3-S8-EVO,
* 22.2-EVO versions before 22.2R3-S5-EVO,
* 22.4-EVO versions before 22.4R3-EVO,
* 23.2-EVO versions before 23.2R2-EVO.
Vulnerability Analysis
Products Associated with CVE-2024-47498
Want to know whenever a new CVE is published for Juniper Networks Junos Evolved? stack.watch will email you.
Affected Versions
Juniper Networks Junos OS Evolved:- Before 21.4R3-S8-EVO is affected.
- Version 22.2-EVO and below 22.2R3-S5-EVO is affected.
- Version 22.4-EVO and below 22.4R3-EVO is affected.
- Version 23.2-EVO and below 23.2R2-EVO is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.