MEDIUM🇵🇱 Wersja polska

CVE-2024-39533

CVSS 6.9v4.0pub. 2024-07-11upd. 2026-01-22

An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an unauthenticated, network-based attacker to cause a minor integrity impact to downstream networks.If one or more of the following match conditions ip-source-address ip-destination-address arp-type which are not supported for this type of filter, are used in an ethernet switching filter, and then this filter is applied as an output filter, the configuration can be committed but the filter will not be in effect. This issue affects Junos OS on QFX5000 Series and EX4600 Series: * All version before 21.2R3-S7,  * 21.4 versions before 21.4R3-S6, * 22.1 versions before 22.1R3-S5, * 22.2 versions before 22.2R3-S3, * 22.3 versions before 22.3R3-S2,  * 22.4 versions before 22.4R3, * 23.2 versions before 23.2R2. Please note that the implemented fix ensures these unsupported match conditions cannot be committed anymore.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Juniper Ex4600

    HW
    Juniper
    wszystkie wersje

  • Juniper Ex4650

    HW
    Juniper
    wszystkie wersje

  • Juniper Junos

    OS
    Juniper
    21.221.422.122.222.322.423.2< 21.2

  • Juniper Qfx5110

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5120

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5130

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5200

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5210

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5220

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5230 64cd

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5240

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5241

    HW
    Juniper
    wszystkie wersje

  • Juniper Qfx5700

    HW
    Juniper
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-36845CRITICAL9.8⚠ KEVten sam produkt

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SR...

CVE-2024-21591CRITICAL9.8PL ✓ten sam produkt

Out-of-bounds Write w J-Web Juniper Junos OS — RCE z uprawnieniami root

CVE-2021-0248CRITICAL10.0ten sam produkt

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials ...

CVE-2021-0254CRITICAL9.8ten sam produkt

A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unaut...

CVE-2021-0211CRITICAL10.0ten sam produkt

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Rout...