Juniper Session Smart Router DHCP Client Stack Buffer Overflow
CVE-2026-103408 Published on October 28, 2026
Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options
A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
Weakness Type
What is a Stack Overflow Vulnerability?
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CVE-2026-103408 has been classified to as a Stack Overflow vulnerability or weakness.
Affected Versions
Juniper Networks Session Smart Router:- Before 7.0.5 is affected.
- Version 7.1.0 and below 7.1.7 is affected.
- Version 7.2.0 and below 7.2.3 is affected.