CVE-2024-47498

Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect

High · published October 11, 2024

CVSS v4.0
7.1
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).

Several configuration statements meant to enforce limits on MAC learning and moves can be configured but do not take effect. This can lead to control plane overload situations which will severely impact the ability of the device to processes legitimate traffic.

This issue affects Junos OS Evolved on QFX5000 Series:

* All versions before 21.4R3-S8-EVO,

* 22.2-EVO versions before 22.2R3-S5-EVO,

* 22.4-EVO versions before 22.4R3-EVO,

* 23.2-EVO versions before 23.2R2-EVO.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:L
EPSS
0.00334 · 25.6th percentile
Published
2024-10-11T15:30Z
EPSS history
Timeline
  • 11 OCT 15:30Z
    Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect
    cvelistv5