CVE-2024-47501

EPSS 0.21%
Veröffentlicht 11.10.2024 16:15:11
Zuletzt bearbeitet 26.01.2026 18:26:24
Erkennungen
Login

Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash

A NULL Pointer Dereference vulnerability in the 

packet forwarding engine (pfe) of Juniper Networks Junos OS on MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS).

In a VPLS or Junos Fusion scenario, the execution of specific show commands will cause all FPCs hosting VPLS sessions or connecting to satellites to crash and restart.

This issue affects Junos on MX304, MX with MPC10/11/LC9600 and EX9200 with EX9200-15C: 



  *  All version before 21.2R3-S1,
  *  21.3 versions before 21.3R3, 
  *  21.4 versions before 21.4R2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 20 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version < 21.2

   Juniper ≫ Ex9200 Version -
   Juniper ≫ Ex9200-15c Version -
   Juniper ≫ Mpc10e-10c Version -
   Juniper ≫ Mpc10e-15c Version -
   Juniper ≫ Mpc11 Version -
   Juniper ≫ Mx10003 Version -
   Juniper ≫ Mx10004 Version -
   Juniper ≫ Mx10008 Version -
   Juniper ≫ Mx10016 Version -
   Juniper ≫ Mx2008 Version -
   Juniper ≫ Mx2010 Version -
   Juniper ≫ Mx240 Version -
   Juniper ≫ Mx304 Version -
   Juniper ≫ Mx480 Version -
   Juniper ≫ Mx960 Version -

Juniper ≫ Junos Version 21.2 Update -

Juniper ≫ Junos Version 21.2 Update r1

Juniper ≫ Junos Version 21.2 Update r1-s1

Juniper ≫ Junos Version 21.2 Update r1-s2

Juniper ≫ Junos Version 21.2 Update r2

Juniper ≫ Junos Version 21.2 Update r2-s1

Juniper ≫ Junos Version 21.2 Update r2-s2

Juniper ≫ Junos Version 21.2 Update r3

Juniper ≫ Junos Version 21.3 Update -

Juniper ≫ Junos Version 21.3 Update r1

Juniper ≫ Junos Version 21.3 Update r1-s1

Juniper ≫ Junos Version 21.3 Update r1-s2

Juniper ≫ Junos Version 21.3 Update r2

Juniper ≫ Junos Version 21.3 Update r2-s1

Juniper ≫ Junos Version 21.3 Update r2-s2

Juniper ≫ Junos Version 21.4 Update -

Juniper ≫ Junos Version 21.4 Update r1

Juniper ≫ Junos Version 21.4 Update r1-s1

Juniper ≫ Junos Version 21.4 Update r1-s2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.108

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Juniper	6.8	0	0	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X
Juniper	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://supportportal.juniper.net/JSA88131

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-47501

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-47501

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-47501

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-47501