CVE-2024-39537

MEDIUM EPSS 25.0%
Published Jul 11, 20241y ago · Modified Jun 17, 20261w ago
6.9 CVSS 4.0
Medium
Find Similar
Published Jul 11, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, specific processes which should only be able to communicate internally within the device can be reached over the network via open ports. This issue affects Junos OS Evolved on ACX 7000 Series: * All versions before 21.4R3-S7-EVO, * 22.2-EVO versions before 22.2R3-S4-EVO, * 22.3-EVO versions before 22.3R3-S3-EVO, * 22.4-EVO versions before 22.4R3-S2-EVO, * 23.2-EVO versions before 23.2R2-EVO, * 23.4-EVO versions before 23.4R1-S1-EVO, 23.4R2-EVO.

CVSS Details

Base Score
6.9
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
25.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-923

Affected Products 58

VendorProductVersionRange
juniperjunos_os_evolved* <21.4
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.3any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved23.2any
juniperjunos_os_evolved23.2any
juniperjunos_os_evolved23.2any
juniperjunos_os_evolved23.2any
juniperjunos_os_evolved23.4any
juniperjunos_os_evolved23.4any
juniperjunos_os_evolved23.4any
juniperacx7020*any
juniperacx7024*any
juniperacx7024x*any
juniperacx7100*any
juniperacx7300*any
juniperacx7509*any

References 1

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.