PT-2022-15284 · Juniper Networks · Junos Evolved

Published 2022-04-14 · Updated 2023-06-27 · CVE-2022-22183

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions 20.4 prior to 20.4R3-S2-EVO Juniper Networks Junos OS Evolved versions 21.1 prior to 21.1R3-S1-EVO Juniper Networks Junos OS Evolved versions 21.2 prior to 21.2R3-EVO Juniper Networks Junos OS Evolved versions 21.3 prior to 21.3R2-EVO Juniper Networks Junos OS Evolved versions 21.4 prior to 21.4R2-EVO

Description An Improper Access Control issue allows a network-based unauthenticated attacker to connect to a specific open IPv4 port, causing the CPU to consume all resources and create a Denial of Service (DoS) condition. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition.

Recommendations For Juniper Networks Junos OS Evolved version 20.4, update to version 20.4R3-S2-EVO or later. For Juniper Networks Junos OS Evolved version 21.1, update to version 21.1R3-S1-EVO or later. For Juniper Networks Junos OS Evolved version 21.2, update to version 21.2R3-EVO or later. For Juniper Networks Junos OS Evolved version 21.3, update to version 21.3R2-EVO or later. For Juniper Networks Junos OS Evolved version 21.4, update to version 21.4R2-EVO or later.

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-16

CWE-200

Related Identifiers

CVE-2022-22183

Affected Products

Junos Evolved

References · 4

• https://kb.juniper.net/JSA69516 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22183 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22183 · Vendor Advisory
• https://t.me/cibsecurity/40787 · Telegram Post