Vulnerability-Lookup

BDU:2023-03130 (CVE-2023-22401)

Vulnerability from fstec – Published: 2023-06-13 – Updated: 2023-06-13 – View on bdu.fstec.ru Exploit exists Yes Fixed

Title

Уязвимость демона Advanced Forwarding Toolkit Manager (aftmand) операционных систем Juniper Networks Junos OS и Junos OS Evolved, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость демона Advanced Forwarding Toolkit Manager (aftmand) операционных систем Juniper Networks Junos OS и Junos OS Evolved связана с некорректной обработкой запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании посредством отправки специально сформированных данных

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Yes

Remediation

Software update

CWE

CWE-129 - Непроверенное индексирование массива

Aliases

CVE-2023-22401, JSA, ID:70197

References

3 references

URL
https://kb.juniper.net/JSA70197
https://vuldb.com/ru/?id.218207
https://safe-surf.ru/upload/VULN/VULN-20230130.9.pdf

Impacted products

2 products from 1 vendor

Vendors

Juniper Networks Inc.

Products

Junos OS Evolved, JunOS

Versions

от 21.3-EVO до 21.3R3-EVO (Junos OS Evolved), от 22.1-EVO до 22.1R2-EVO (Junos OS Evolved), от 22.1 до 22.1R2 (JunOS), от 22.1 до 22.1R3 (JunOS), от 22.2 до 22.2R2 (JunOS), от 21.4-EVO до 21.4R1-S2-EVO (Junos OS Evolved), от 21.4-EVO до 21.4R2-EVO (Junos OS Evolved), от 21.4-EVO до 21.4R2-S1-EVO (Junos OS Evolved), от 22.1-EVO до 22.1R3-EVO (Junos OS Evolved), от 22.2-EVO до 22.2R1-S1-EVO (Junos OS Evolved), от 22.2-EVO до 22.2R2-EVO (Junos OS Evolved)

Product types

Operating system

Platforms

Juniper Networks Inc. Junos OS Evolved от 21.3-EVO до 21.3R3-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved от 22.1-EVO до 22.1R2-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved от 21.3-EVO до 21.3R3-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved от 22.1-EVO до 22.1R2-EVO PTX10016, Juniper Networks Inc. JunOS от 22.1 до 22.1R2 PTX10008, Juniper Networks Inc. JunOS от 22.1 до 22.1R2 PTX10016, Juniper Networks Inc. JunOS от 22.1 до 22.1R3 PTX10008, Juniper Networks Inc. JunOS от 22.1 до 22.1R3 PTX10016, Juniper Networks Inc. JunOS от 22.2 до 22.2R2 PTX10008, Juniper Networks Inc. JunOS от 22.2 до 22.2R2 PTX10016, Juniper Networks Inc. Junos OS Evolved от 21.4-EVO до 21.4R1-S2-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved от 21.4-EVO до 21.4R1-S2-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved от 21.4-EVO до 21.4R2-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved от 21.4-EVO до 21.4R2-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved от 21.4-EVO до 21.4R2-S1-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved от 21.4-EVO до 21.4R2-S1-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved от 22.1-EVO до 22.1R3-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved от 22.1-EVO до 22.1R3-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved от 22.2-EVO до 22.2R1-S1-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved от 22.2-EVO до 22.2R1-S1-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved от 22.2-EVO до 22.2R2-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved от 22.2-EVO до 22.2R2-EVO PTX10016

Mitigations

Использование рекомендаций: https://kb.juniper.net/JSA70197

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Juniper Networks Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 21.3-EVO \u0434\u043e 21.3R3-EVO (Junos OS Evolved), \u043e\u0442 22.1-EVO \u0434\u043e 22.1R2-EVO (Junos OS Evolved), \u043e\u0442 22.1 \u0434\u043e 22.1R2 (JunOS), \u043e\u0442 22.1 \u0434\u043e 22.1R3 (JunOS), \u043e\u0442 22.2 \u0434\u043e 22.2R2 (JunOS), \u043e\u0442 21.4-EVO \u0434\u043e 21.4R1-S2-EVO (Junos OS Evolved), \u043e\u0442 21.4-EVO \u0434\u043e 21.4R2-EVO (Junos OS Evolved), \u043e\u0442 21.4-EVO \u0434\u043e 21.4R2-S1-EVO (Junos OS Evolved), \u043e\u0442 22.1-EVO \u0434\u043e 22.1R3-EVO (Junos OS Evolved), \u043e\u0442 22.2-EVO \u0434\u043e 22.2R1-S1-EVO (Junos OS Evolved), \u043e\u0442 22.2-EVO \u0434\u043e 22.2R2-EVO (Junos OS Evolved)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://kb.juniper.net/JSA70197",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.01.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.06.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.06.2023",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-03130",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-22401, JSA ID:70197",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Junos OS Evolved, JunOS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Juniper Networks Inc. Junos OS Evolved \u043e\u0442 21.3-EVO \u0434\u043e 21.3R3-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 22.1-EVO \u0434\u043e 22.1R2-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 21.3-EVO \u0434\u043e 21.3R3-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 22.1-EVO \u0434\u043e 22.1R2-EVO PTX10016, Juniper Networks Inc. JunOS \u043e\u0442 22.1 \u0434\u043e 22.1R2 PTX10008, Juniper Networks Inc. JunOS \u043e\u0442 22.1 \u0434\u043e 22.1R2 PTX10016, Juniper Networks Inc. JunOS \u043e\u0442 22.1 \u0434\u043e 22.1R3 PTX10008, Juniper Networks Inc. JunOS \u043e\u0442 22.1 \u0434\u043e 22.1R3 PTX10016, Juniper Networks Inc. JunOS \u043e\u0442 22.2 \u0434\u043e 22.2R2 PTX10008, Juniper Networks Inc. JunOS \u043e\u0442 22.2 \u0434\u043e 22.2R2 PTX10016, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 21.4-EVO \u0434\u043e 21.4R1-S2-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 21.4-EVO \u0434\u043e 21.4R1-S2-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 21.4-EVO \u0434\u043e 21.4R2-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 21.4-EVO \u0434\u043e 21.4R2-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 21.4-EVO \u0434\u043e 21.4R2-S1-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 21.4-EVO \u0434\u043e 21.4R2-S1-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 22.1-EVO \u0434\u043e 22.1R3-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 22.1-EVO \u0434\u043e 22.1R3-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 22.2-EVO \u0434\u043e 22.2R1-S1-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 22.2-EVO \u0434\u043e 22.2R1-S1-EVO PTX10016, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 22.2-EVO \u0434\u043e 22.2R2-EVO PTX10008, Juniper Networks Inc. Junos OS Evolved \u043e\u0442 22.2-EVO \u0434\u043e 22.2R2-EVO PTX10016",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u043c\u043e\u043d\u0430 Advanced Forwarding Toolkit Manager (aftmand) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Juniper Networks Junos OS \u0438 Junos OS Evolved, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0435 \u0438\u043d\u0434\u0435\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 (CWE-129)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u043c\u043e\u043d\u0430 Advanced Forwarding Toolkit Manager (aftmand) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Juniper Networks Junos OS \u0438 Junos OS Evolved \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://kb.juniper.net/JSA70197\nhttps://vuldb.com/ru/?id.218207\nhttps://safe-surf.ru/upload/VULN/VULN-20230130.9.pdf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-129",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

CVE-2023-22401 (GCVE-0-2023-22401)

Vulnerability from cvelistv5 – Published: 2023-01-12 00:00 – Updated: 2025-04-07 15:39

Title

Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash

Summary

An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On the PTX10008 and PTX10016 platforms running Junos OS or Junos OS Evolved, when a specific SNMP MIB is queried this will cause a PFE crash and the FPC will go offline and not automatically recover. A system restart is required to get the affected FPC in an operational state again. This issue affects: Juniper Networks Junos OS 22.1 version 22.1R2 and later versions; 22.1 versions prior to 22.1R3; 22.2 versions prior to 22.2R2. Juniper Networks Junos OS Evolved 21.3-EVO version 21.3R3-EVO and later versions; 21.4-EVO version 21.4R1-S2-EVO, 21.4R2-EVO and later versions prior to 21.4R2-S1-EVO; 22.1-EVO version 22.1R2-EVO and later versions prior to 22.1R3-EVO; 22.2-EVO versions prior to 22.2R1-S1-EVO, 22.2R2-EVO.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-07 15:07 UTC

CWE

CWE-129 - Improper Validation of Array Index
Denial of Service (DoS)

Assigner

juniper mitre root

References

1 reference

URL	Tags
https://kb.juniper.net/JSA70197

Impacted products

2 products

Vendor	Product	Version
Juniper Networks	Junos OS	Affected: 22.1R2 , < 22.1* (custom) Affected: 22.2 , < 22.2R2 (custom)
Juniper Networks	Junos OS Evolved	Affected: 21.3R3-EVO , < 21.3-EVO* (custom) Affected: 21.4R1-S2-EVO, 21.4R2-EVO , < 21.4-EVO* (custom) Affected: 22.1R2-EVO , < 22.1-EVO* (custom) Affected: 22.2-EVO , < 22.2R1-S1-EVO, 22.2R2-EVO (custom)

Date Public

2023-01-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T10:07:06.660Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA70197"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-22401",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T15:07:09.356052Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T15:39:07.634Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "22.1R3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "22.1*",
              "status": "affected",
              "version": "22.1R2",
              "versionType": "custom"
            },
            {
              "lessThan": "22.2R2",
              "status": "affected",
              "version": "22.2",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Junos OS Evolved",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "21.3-EVO*",
              "status": "affected",
              "version": "21.3R3-EVO",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "21.4R2-S1-EVO",
                  "status": "unaffected"
                }
              ],
              "lessThan": "21.4-EVO*",
              "status": "affected",
              "version": "21.4R1-S2-EVO, 21.4R2-EVO",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "22.1R3-EVO",
                  "status": "unaffected"
                }
              ],
              "lessThan": "22.1-EVO*",
              "status": "affected",
              "version": "22.1R2-EVO",
              "versionType": "custom"
            },
            {
              "lessThan": "22.2R1-S1-EVO, 22.2R2-EVO",
              "status": "affected",
              "version": "22.2-EVO",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2023-01-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On the PTX10008 and PTX10016 platforms running Junos OS or Junos OS Evolved, when a specific SNMP MIB is queried this will cause a PFE crash and the FPC will go offline and not automatically recover. A system restart is required to get the affected FPC in an operational state again. This issue affects: Juniper Networks Junos OS 22.1 version 22.1R2 and later versions; 22.1 versions prior to 22.1R3; 22.2 versions prior to 22.2R2. Juniper Networks Junos OS Evolved 21.3-EVO version 21.3R3-EVO and later versions; 21.4-EVO version 21.4R1-S2-EVO, 21.4R2-EVO and later versions prior to 21.4R2-S1-EVO; 22.1-EVO version 22.1R2-EVO and later versions prior to 22.1R3-EVO; 22.2-EVO versions prior to 22.2R1-S1-EVO, 22.2R2-EVO."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-129",
              "description": "CWE-129 Improper Validation of Array Index",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "Denial of Service (DoS)",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-12T00:00:00.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "url": "https://kb.juniper.net/JSA70197"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: \nJunos OS: 22.1R3, 22.2R2, and all subsequent releases.\nJunos OS Evolved: 21.4R2-S1-EVO, 22.1R3-EVO, 22.2R1-S1-EVO, 22.2R2-EVO, and all subsequent releases."
        }
      ],
      "source": {
        "advisory": "JSA70197",
        "defect": [
          "1668861"
        ],
        "discovery": "USER"
      },
      "title": "Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash",
      "workarounds": [
        {
          "lang": "en",
          "value": "There are no known workarounds for this issue. To reduce the risk of exploitation use access lists or firewall filters to limit access to the device only from trusted, administrative networks or hosts."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2023-22401",
    "datePublished": "2023-01-12T00:00:00.000Z",
    "dateReserved": "2022-12-27T00:00:00.000Z",
    "dateUpdated": "2025-04-07T15:39:07.634Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.