PT-2022-6649 · Juniper Networks · Junos+1

Published 2022-10-12 · Updated 2022-10-12 · CVE-2022-22199

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS (affected versions not specified) Juniper Networks Junos OS Evolved (affected versions not specified)

Description The issue is related to incorrect handling of unexpected data types in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved. Exploitation of this issue may allow a remote attacker to cause a denial of service by sending a specific EVPN route.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-241

Related Identifiers

BDU:2023-03135

CVE-2022-22199

Affected Products

Junos

Junos Evolved

References · 4

• https://bdu.fstec.ru/vul/2023-03135 · Security Note
• https://vuldb.com/?id.211107 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22219 · Note
• https://kb.juniper.net/JSA69898 · Note