CVE-2024-30384

EPSS 0.05%
Veröffentlicht 12.04.2024 16:15:37
Zuletzt bearbeitet 06.02.2025 20:36:55
Quelle sirt@juniper.net
Teams Watchlist Login
Unerledigt Login

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on EX4300 Series allows a locally authenticated attacker with low privileges to cause a Denial-of-Service (Dos).

If a specific CLI command is issued, a PFE crash will occur. This will cause traffic forwarding to be interrupted until the system self-recovers. 

This issue affects Junos OS: 

All versions before 20.4R3-S10,

21.2 versions before 21.2R3-S7,

21.4 versions before 21.4R3-S6.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version < 20.4

   Juniper ≫ Ex4300 Version-
   Juniper ≫ Ex4300-24p Version-
   Juniper ≫ Ex4300-24p-s Version-
   Juniper ≫ Ex4300-24t Version-
   Juniper ≫ Ex4300-24t-s Version-
   Juniper ≫ Ex4300-32f Version-
   Juniper ≫ Ex4300-32f-dc Version-
   Juniper ≫ Ex4300-32f-s Version-
   Juniper ≫ Ex4300-48mp Version-
   Juniper ≫ Ex4300-48mp-s Version-
   Juniper ≫ Ex4300-48p Version-
   Juniper ≫ Ex4300-48p-s Version-
   Juniper ≫ Ex4300-48t Version-
   Juniper ≫ Ex4300-48t-afi Version-
   Juniper ≫ Ex4300-48t-dc Version-
   Juniper ≫ Ex4300-48t-dc-afi Version-
   Juniper ≫ Ex4300-48t-s Version-

Juniper ≫ Junos Version20.4 Update-

Juniper ≫ Junos Version20.4 Updater1

Juniper ≫ Junos Version20.4 Updater1-s1

Juniper ≫ Junos Version20.4 Updater2

Juniper ≫ Junos Version20.4 Updater2-s1

Juniper ≫ Junos Version20.4 Updater2-s2

Juniper ≫ Junos Version20.4 Updater3

Juniper ≫ Junos Version20.4 Updater3-s1

Juniper ≫ Junos Version20.4 Updater3-s2

Juniper ≫ Junos Version20.4 Updater3-s3

Juniper ≫ Junos Version20.4 Updater3-s4

Juniper ≫ Junos Version20.4 Updater3-s5

Juniper ≫ Junos Version20.4 Updater3-s6

Juniper ≫ Junos Version20.4 Updater3-s7

Juniper ≫ Junos Version20.4 Updater3-s8

Juniper ≫ Junos Version20.4 Updater3-s9

Juniper ≫ Junos Version21.2 Update-

Juniper ≫ Junos Version21.2 Updater1

Juniper ≫ Junos Version21.2 Updater1-s1

Juniper ≫ Junos Version21.2 Updater1-s2

Juniper ≫ Junos Version21.2 Updater2

Juniper ≫ Junos Version21.2 Updater2-s1

Juniper ≫ Junos Version21.2 Updater2-s2

Juniper ≫ Junos Version21.2 Updater3

Juniper ≫ Junos Version21.2 Updater3-s1

Juniper ≫ Junos Version21.2 Updater3-s2

Juniper ≫ Junos Version21.2 Updater3-s3

Juniper ≫ Junos Version21.2 Updater3-s4

Juniper ≫ Junos Version21.2 Updater3-s5

Juniper ≫ Junos Version21.2 Updater3-s6

Juniper ≫ Junos Version21.4 Updater1

Juniper ≫ Junos Version21.4 Updater1-s1

Juniper ≫ Junos Version21.4 Updater1-s2

Juniper ≫ Junos Version21.4 Updater2

Juniper ≫ Junos Version21.4 Updater2-s1

Juniper ≫ Junos Version21.4 Updater2-s2

Juniper ≫ Junos Version21.4 Updater3

Juniper ≫ Junos Version21.4 Updater3-s1

Juniper ≫ Junos Version21.4 Updater3-s2

Juniper ≫ Junos Version21.4 Updater3-s3

Juniper ≫ Junos Version21.4 Updater3-s4

Juniper ≫ Junos Version21.4 Updater3-s5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.141

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
sirt@juniper.net	6.8	0	0	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
sirt@juniper.net	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

http://supportportal.juniper.net/JSA79186

Vendor Advisory

https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2024-30384

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-30384

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-30384

EUVD