CVE-2026-33803CWE-923

Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

Medium · published July 9, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
27.8
In the wild
Unconfirmed
What it is

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device.

Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets.

This issue affects Junos OS Evolved:

* all versions before 23.2R2-S7-EVO,

* 23.4 versions before 23.4R2-S8-EVO,

* 24.2 versions before 24.2R2-S5-EVO,

* 24.4 versions before 24.4R2-S4-EVO,

* 25.2 versions before 25.2R2-S1-EVO,

* 25.4 versions before 25.4R1-S2-EVO.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/AU:Y/R:U/RE:M
EPSS
0.00353 · 27.8th percentile
Weakness
CWE-923 · Improper Restriction of Communication Channel to Intended Endpoints
Published
2026-07-09T21:04Z
EPSS history
Timeline
  • 09 JUL 21:04Z
    Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
    cvelistv5