CVE-2024-47498

HIGH EPSS 23.8%
Published Oct 11, 20241y ago · Modified Jun 17, 20262w ago
7.1 CVSS 4.0
High
Find Similar
Published Oct 11, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Several configuration statements meant to enforce limits on MAC learning and moves can be configured but do not take effect. This can lead to control plane overload situations which will severely impact the ability of the device to processes legitimate traffic. This issue affects Junos OS Evolved on QFX5000 Series: * All versions before 21.4R3-S8-EVO, * 22.2-EVO versions before 22.2R3-S5-EVO, * 22.4-EVO versions before 22.4R3-EVO, * 23.2-EVO versions before 23.2R2-EVO.

CVSS Details

Base Score
7.1
Exploitability
Impact
Vector string
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
23.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Affected Products 49

VendorProductVersionRange
juniperjunos_os_evolved* <21.4
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved21.4any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.2any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved22.4any
juniperjunos_os_evolved23.2any
juniperjunos_os_evolved23.2any
juniperjunos_os_evolved23.2any
juniperjunos_os_evolved23.2any
juniperqfx5110*any
juniperqfx5120*any
juniperqfx5130*any
juniperqfx5200*any
juniperqfx5210*any
juniperqfx5220*any
juniperqfx5230-64cd*any
juniperqfx5240*any
juniperqfx5241*any
juniperqfx5700*any

References 1

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.