CVE-2026-57022

EPSS 0.29%
Veröffentlicht 09.07.2026 21:06:06
Zuletzt bearbeitet 14.07.2026 16:54:04
Erkennungen
Login

Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

When an affected device initiates a TCP connection to an attacker-controlled system that responds with a specific packet, this causes a PFE crash and restart, which affects all services until the system has automatically recovered.
This issue can happen among others in the following scenarios: ALG, SSL proxy, UTM, RTLOG, AppQoE probing, AAMW, ICAP, URL filtering.

This issue affects Junos OS on MX Series with SPC3, SRX5k Series with SPC3, SRX1600 Series, SRX2300 Series, SRX4000 Series, and vSRX Series:

  *  all versions before 23.2R2-S4,
  *  23.4 versions before 23.4R2-S5,
  *  24.2 versions before 24.2R2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 22 VulnDex Vulnerability Enrichment 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version < 23.2

   Juniper ≫ Vsrx Version -
   Juniper ≫ Mx-spc3 Version -
   Juniper ≫ Mx240 Version -
   Juniper ≫ Mx480 Version -
   Juniper ≫ Mx960 Version -
   Juniper ≫ Srx1600 Version -
   Juniper ≫ Srx2300 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4120 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx4300 Version -
   Juniper ≫ Srx4600 Version -
   Juniper ≫ Srx4700 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx5k-spc3 Version -

Juniper ≫ Junos Version 23.2 Update -

Juniper ≫ Junos Version 23.2 Update r1

Juniper ≫ Junos Version 23.2 Update r1-s1

Juniper ≫ Junos Version 23.2 Update r1-s2

Juniper ≫ Junos Version 23.2 Update r2

Juniper ≫ Junos Version 23.2 Update r2-s1

Juniper ≫ Junos Version 23.2 Update r2-s2

Juniper ≫ Junos Version 23.2 Update r2-s3

Juniper ≫ Junos Version 23.4 Update -

Juniper ≫ Junos Version 23.4 Update r1

Juniper ≫ Junos Version 23.4 Update r1-s1

Juniper ≫ Junos Version 23.4 Update r1-s2

Juniper ≫ Junos Version 23.4 Update r2

Juniper ≫ Junos Version 23.4 Update r2-s1

Juniper ≫ Junos Version 23.4 Update r2-s2

Juniper ≫ Junos Version 23.4 Update r2-s3

Juniper ≫ Junos Version 23.4 Update r2-s4

Juniper ≫ Junos Version 24.2 Update -

Juniper ≫ Junos Version 24.2 Update r1

Juniper ≫ Junos Version 24.2 Update r1-s1

Juniper ≫ Junos Version 24.2 Update r1-s2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.29%	0.213

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Juniper	8.2	0	0	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:A/V:X/RE:M/U:X
Juniper	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://supportportal.juniper.net/JSA110082

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-57022

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-57022

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-57022

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-57022