CVE-2024-39534

MEDIUM EPSS 46.0%

Published Oct 11, 20241y ago · Modified Jun 17, 20262w ago

5.3 CVSS 4.0

Medium

Published Oct 11, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

An Incorrect Comparison vulnerability in the local address verification API of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker to create sessions or send traffic to the device using the network and broadcast address of the subnet assigned to an interface. This is unintended and unexpected behavior and can allow an attacker to bypass certain compensating controls, such as stateless firewall filters. This issue affects Junos OS Evolved: * All versions before 21.4R3-S8-EVO, * 22.2-EVO before 22.2R3-S4-EVO, * 22.3-EVO before 22.3R3-S4-EVO, * 22.4-EVO before 22.4R3-S3-EVO, * 23.2-EVO before 23.2R2-S1-EVO, * 23.4-EVO before 23.4R1-S2-EVO, 23.4R2-EVO.

CVSS Details

Base Score

5.3

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Adjacent

Attack Complexity Low

Privileges Required None

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

46.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-697

Affected Products 57

Vendor	Product	Version	Range
juniper	junos_os_evolved	*	<21.4
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	21.4	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.2	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.3	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	22.4	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.2	any
juniper	junos_os_evolved	23.4	any
juniper	junos_os_evolved	23.4	any
juniper	junos_os_evolved	23.4	any
juniper	junos_os_evolved	23.4	any

References 1

supportportal.juniper.net https://supportportal.juniper.net/JSA88105

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.