Incorrect comparison in Junos OS Evolved

1) Incorrect comparison

EUVDB-ID: #VU98393

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-39534

CWE-ID: CWE-697 - Incorrect Comparison

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The vulnerability exists due to  incorrect comparison error in the local address verification API. A remote non-authenticated attacker can create sessions or send traffic to the device using the network and broadcast address of the subnet assigned to an interface.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Junos OS Evolved: 21.4R1-EVO - 22.3R3-S3-EVO

CPE2.3

• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R1-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R1-S1-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R1-S2-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R2-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R2-S1-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R2-S2-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R3-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R3-S1-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R3-S2-EVO:*:*:*:*:*:*:*
• cpe:2.3:o:juniper_networks:junos_os_evolved:21.4R3-S3-EVO:*:*:*:*:*:*:*

External links

https://supportportal.juniper.net/s/article/2024-10-Security-Bulletin-Junos-OS-Evolved-Connections-to-the-network-and-broadcast-address-accepted-CVE-2024-39534

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.