SB2024011074 - Exposure of resource to wrong sphere in Juniper Junos OS
Published: January 10, 2024
Security Bulletin ID
SB2024011074
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Exposure of resource to wrong sphere (CVE-ID: CVE-2024-21597)
The vulnerability allows a remote non-authenticated attacker to manipulate data.
The vulnerability exists due to exposure of resource to wrong sphere error in the Packet Forwarding Engine (PFE). A remote non-authenticated attacker can bypass the intended access restrictions.
In an Abstracted Fabric (AF) scenario if routing-instances (RI) are configured, specific valid traffic destined to the device can bypass the configured lo0 firewall filters as it's received in the wrong RI context.
Remediation
Install update from vendor's website.