CVE-2023-28985
SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention (IDP) of Juniper Networks SRX Series and MX Series allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). Continued receipt of this specific packet will cause a sustained Denial of Service condition.
On all SRX Series and MX Series platforms, where IDP is enabled and a specific malformed SSL packet is received, the SSL detector crashes leading to an FPC core.
This issue affects Juniper Networks SRX Series and MX Series prior to SigPack 3598.
In order to identify the current SigPack version, following command can be used:
user@junos# show security idp security-package-version
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-29 CVE Reserved
- 2023-07-14 CVE Published
- 2024-07-20 EPSS Updated
- 2024-11-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-1286: Improper Validation of Syntactic Correctness of Input
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://supportportal.juniper.net/JSA71662 | 2023-07-27 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Vsrx Search vendor "Juniper" for product "Vsrx" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Csrx Search vendor "Juniper" for product "Csrx" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx10 Search vendor "Juniper" for product "Mx10" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx10000 Search vendor "Juniper" for product "Mx10000" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx10003 Search vendor "Juniper" for product "Mx10003" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx10008 Search vendor "Juniper" for product "Mx10008" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx10016 Search vendor "Juniper" for product "Mx10016" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx104 Search vendor "Juniper" for product "Mx104" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx150 Search vendor "Juniper" for product "Mx150" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx2008 Search vendor "Juniper" for product "Mx2008" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx2010 Search vendor "Juniper" for product "Mx2010" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx2020 Search vendor "Juniper" for product "Mx2020" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx204 Search vendor "Juniper" for product "Mx204" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx240 Search vendor "Juniper" for product "Mx240" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx40 Search vendor "Juniper" for product "Mx40" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx480 Search vendor "Juniper" for product "Mx480" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx5 Search vendor "Juniper" for product "Mx5" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx80 Search vendor "Juniper" for product "Mx80" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Mx960 Search vendor "Juniper" for product "Mx960" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx100 Search vendor "Juniper" for product "Srx100" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx110 Search vendor "Juniper" for product "Srx110" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx1400 Search vendor "Juniper" for product "Srx1400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx1500 Search vendor "Juniper" for product "Srx1500" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx210 Search vendor "Juniper" for product "Srx210" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx220 Search vendor "Juniper" for product "Srx220" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx240 Search vendor "Juniper" for product "Srx240" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx240h2 Search vendor "Juniper" for product "Srx240h2" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx240m Search vendor "Juniper" for product "Srx240m" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx300 Search vendor "Juniper" for product "Srx300" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx320 Search vendor "Juniper" for product "Srx320" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx340 Search vendor "Juniper" for product "Srx340" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3400 Search vendor "Juniper" for product "Srx3400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx345 Search vendor "Juniper" for product "Srx345" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx3600 Search vendor "Juniper" for product "Srx3600" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx380 Search vendor "Juniper" for product "Srx380" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx4000 Search vendor "Juniper" for product "Srx4000" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx4100 Search vendor "Juniper" for product "Srx4100" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx4200 Search vendor "Juniper" for product "Srx4200" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx4600 Search vendor "Juniper" for product "Srx4600" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5000 Search vendor "Juniper" for product "Srx5000" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5400 Search vendor "Juniper" for product "Srx5400" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx550 Search vendor "Juniper" for product "Srx550" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx550 Hm Search vendor "Juniper" for product "Srx550 Hm" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx550m Search vendor "Juniper" for product "Srx550m" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5600 Search vendor "Juniper" for product "Srx5600" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx5800 Search vendor "Juniper" for product "Srx5800" | - | - |
Safe
|
| Juniper Search vendor "Juniper" | Junos Search vendor "Juniper" for product "Junos" | - | - |
Affected
| in | Juniper Search vendor "Juniper" | Srx650 Search vendor "Juniper" for product "Srx650" | - | - |
Safe
|