PT-2022-15285 · Juniper Networks · Junos

Published 2022-04-14 · Updated 2022-04-21 · CVE-2022-22186

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on EX4650 Series versions prior to 19.1R3-S8 Juniper Networks Junos OS on EX4650 Series 19.2 versions prior to 19.2R3-S5 Juniper Networks Junos OS on EX4650 Series 19.3 versions prior to 19.3R3-S5 Juniper Networks Junos OS on EX4650 Series 19.4 versions prior to 19.4R3-S7 Juniper Networks Junos OS on EX4650 Series 20.1 versions prior to 20.1R3-S3 Juniper Networks Junos OS on EX4650 Series 20.2 versions prior to 20.2R3-S4 Juniper Networks Junos OS on EX4650 Series 20.3 versions prior to 20.3R3-S3 Juniper Networks Junos OS on EX4650 Series 20.4 versions prior to 20.4R3-S2 Juniper Networks Junos OS on EX4650 Series 21.1 versions prior to 21.1R3-S1 Juniper Networks Junos OS on EX4650 Series 21.2 versions prior to 21.2R3 Juniper Networks Junos OS on EX4650 Series 21.3 versions prior to 21.3R2 Juniper Networks Junos OS on EX4650 Series 21.4 versions prior to 21.4R2 Juniper Networks Junos OS on EX4650 Series 22.1 versions prior to 22.1R1

Description Due to an Improper Initialization issue, packets received on the management interface (em0) but not destined to the device, may be improperly forwarded to an egress interface, instead of being discarded. Such traffic being sent by a client may appear genuine, but is non-standard in nature and should be considered as potentially malicious.

Recommendations For Juniper Networks Junos OS on EX4650 Series versions prior to 19.1R3-S8, update to version 19.1R3-S8 or later. For Juniper Networks Junos OS on EX4650 Series 19.2 versions prior to 19.2R3-S5, update to version 19.2R3-S5 or later. For Juniper Networks Junos OS on EX4650 Series 19.3 versions prior to 19.3R3-S5, update to version 19.3R3-S5 or later. For Juniper Networks Junos OS on EX4650 Series 19.4 versions prior to 19.4R3-S7, update to version 19.4R3-S7 or later. For Juniper Networks Junos OS on EX4650 Series 20.1 versions prior to 20.1R3-S3, update to version 20.1R3-S3 or later. For Juniper Networks Junos OS on EX4650 Series 20.2 versions prior to 20.2R3-S4, update to version 20.2R3-S4 or later. For Juniper Networks Junos OS on EX4650 Series 20.3 versions prior to 20.3R3-S3, update to version 20.3R3-S3 or later. For Juniper Networks Junos OS on EX4650 Series 20.4 versions prior to 20.4R3-S2, update to version 20.4R3-S2 or later. For Juniper Networks Junos OS on EX4650 Series 21.1 versions prior to 21.1R3-S1, update to version 21.1R3-S1 or later. For Juniper Networks Junos OS on EX4650 Series 21.2 versions prior to 21.2R3, update to version 21.2R3 or later. For Juniper Networks Junos OS on EX4650 Series 21.3 versions prior to 21.3R2, update to version 21.3R2 or later. For Juniper Networks Junos OS on EX4650 Series 21.4 versions prior to 21.4R2, update to version 21.4R2 or later. For Juniper Networks Junos OS on EX4650 Series 22.1 versions prior to 22.1R1, update to version 22.1R1 or later.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2022-22186

Affected Products

Junos

References · 4

• https://kb.juniper.net/JSA69494 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22186 · Security Note
• https://t.me/cibsecurity/40800 · Telegram Post