CVE-2023-44195

Junos OS Evolved: Packets which are not destined to the router can reach the RE

Severity Score

5.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the NetworkStack agent daemon (nsagentd) of Juniper Networks Junos OS Evolved allows an unauthenticated network based attacker to cause limited impact to the availability of the system.

If specific packets reach the Routing-Engine (RE) these will be processed normally even if firewall filters are in place which should have prevented this. This can lead to a limited, increased consumption of resources resulting in a Denial-of-Service (DoS), and unauthorized access.

CVE-2023-44196 is a prerequisite for this issue.

This issue affects Juniper Networks Junos OS Evolved:

* 21.3-EVO versions prior to 21.3R3-S5-EVO;
* 21.4-EVO versions prior to 21.4R3-S4-EVO;
* 22.1-EVO version 22.1R1-EVO and later;
* 22.2-EVO version 22.2R1-EVO and later;
* 22.3-EVO versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;
* 22.4-EVO versions prior to 22.4R3-EVO.

This issue doesn't not affected Junos OS Evolved versions prior to 21.3R1-EVO.

Una vulnerabilidad de Restricción Inadecuada del Canal de Comunicación a los Endpoints Previstos en el daemon del agente NetworkStack (nsagentd) de Juniper Networks Junos OS Evolved permite que un atacante basado en red no autenticado cause un impacto limitado en la disponibilidad del sistema. Si paquetes específicos llegan al Routing-Engine (RE), se procesarán normalmente incluso si existen filtros de firewall que deberían haberlo impedido. Esto puede provocar un consumo mayor y limitado de recursos, lo que resulta en una Denegación de Servicio (DoS) y un acceso no autorizado. CVE-2023-44196 es un requisito previo para este problema. Este problema afecta a Juniper Networks Junos OS Evolved: * Versiones 21.3-EVO anteriores a 21.3R3-S5-EVO; * Versiones 21.4-EVO anteriores a 21.4R3-S4-EVO; * 22.1-EVO versión 22.1R1-EVO y posteriores; * 22.2-EVO versión 22.2R1-EVO y posteriores; * Versiones 22.3-EVO anteriores a 22.3R2-S2-EVO, 22.3R3-S1-EVO; * Versiones 22.4-EVO anteriores a 22.4R3-EVO. Este problema no afecta a las versiones evolucionadas de Junos OS anteriores a 21.3R1-EVO.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-09-26 CVE Reserved
2023-10-12 CVE Published
2024-09-11 EPSS Updated
2024-09-17 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://supportportal.juniper.net/JSA73160	2023-10-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r3		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.4"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.2"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.3"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.3"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.3"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				22.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "22.4"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				23.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "23.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				23.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "23.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				23.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "23.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				23.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "23.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				23.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "23.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				23.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "23.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				23.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "23.2"		r2-s2		Affected