7.5

CVE-2022-22171

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which cause the PFE to reset. This issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect versions of Junos OS prior to 19.4R1.

Data is provided by the National Vulnerability Database (NVD)
Juniper ≫ Junos Version19.4 Updater1
Juniper ≫ Junos Version19.4 Updater1-s1
Juniper ≫ Junos Version19.4 Updater1-s2
Juniper ≫ Junos Version19.4 Updater1-s3
Juniper ≫ Junos Version19.4 Updater1-s4
Juniper ≫ Junos Version19.4 Updater2
Juniper ≫ Junos Version19.4 Updater2-s1
Juniper ≫ Junos Version19.4 Updater2-s2
Juniper ≫ Junos Version19.4 Updater2-s3
Juniper ≫ Junos Version19.4 Updater2-s4
Juniper ≫ Junos Version19.4 Updater2-s5
Juniper ≫ Junos Version19.4 Updater3
Juniper ≫ Junos Version19.4 Updater3-s1
Juniper ≫ Junos Version19.4 Updater3-s2
Juniper ≫ Junos Version19.4 Updater3-s3
Juniper ≫ Junos Version19.4 Updater3-s4
Juniper ≫ Junos Version19.4 Updater3-s5
Juniper ≫ Junos Version19.4 Updater3-s6
Juniper ≫ Junos Version20.1 Updater1
Juniper ≫ Junos Version20.1 Updater1-s1
Juniper ≫ Junos Version20.1 Updater1-s2
Juniper ≫ Junos Version20.1 Updater1-s3
Juniper ≫ Junos Version20.1 Updater1-s4
Juniper ≫ Junos Version20.1 Updater2
Juniper ≫ Junos Version20.1 Updater2-s1
Juniper ≫ Junos Version20.1 Updater2-s2
Juniper ≫ Junos Version20.1 Updater3
Juniper ≫ Junos Version20.1 Updater3-s1
Juniper ≫ Junos Version20.1 Updater3-s2
Juniper ≫ Junos Version20.2 Updater1
Juniper ≫ Junos Version20.2 Updater1-s1
Juniper ≫ Junos Version20.2 Updater1-s2
Juniper ≫ Junos Version20.2 Updater1-s3
Juniper ≫ Junos Version20.2 Updater2
Juniper ≫ Junos Version20.2 Updater2-s1
Juniper ≫ Junos Version20.2 Updater2-s2
Juniper ≫ Junos Version20.2 Updater2-s3
Juniper ≫ Junos Version20.2 Updater3
Juniper ≫ Junos Version20.2 Updater3-s1
Juniper ≫ Junos Version20.2 Updater3-s2
Juniper ≫ Junos Version20.3 Updater1
Juniper ≫ Junos Version20.3 Updater1-s1
Juniper ≫ Junos Version20.3 Updater2
Juniper ≫ Junos Version20.3 Updater2-s1
Juniper ≫ Junos Version20.3 Updater3
Juniper ≫ Junos Version20.3 Updater3-s1
Juniper ≫ Junos Version20.4 Updater1
Juniper ≫ Junos Version20.4 Updater1-s1
Juniper ≫ Junos Version20.4 Updater2
Juniper ≫ Junos Version20.4 Updater2-s1
Juniper ≫ Junos Version20.4 Updater2-s2
Juniper ≫ Junos Version20.4 Updater3
Juniper ≫ Junos Version21.1 Updater1
Juniper ≫ Junos Version21.1 Updater1-s1
Juniper ≫ Junos Version21.1 Updater2
Juniper ≫ Junos Version21.1 Updater2-s1
Juniper ≫ Junos Version21.2 Updater1
Juniper ≫ Junos Version21.2 Updater1-s1
Juniper ≫ Junos Version21.3 Updater1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.39% 0.571
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
sirt@juniper.net 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.