Juniper Junos OS Evolved QFX5000 Unauthenticated DoS via MAC Limit (CVE-2024-47498)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-47498 2. Affected Product: Junos OS Evolved: QFX5000 Series 3. Issue Description: - A UI vulnerability that is either not implemented or unsupported, allowing unauthorized, adjacent attackers to cause a Denial of Service (DoS). - Configured MAC learning and move limit settings do not take effect, potentially causing the device to fail in processing legitimate traffic. 4. Affected Versions: - All versions of Junos OS Evolved. - Specific versions for QFX5000 Series: - 21.4R3-S8-EVO - All versions prior to 22.2-EVO - All versions prior to 22.4-EVO - All versions prior to 23.2-EVO 5. Solution: - Upgrade to specific software versions to resolve the issue, including: 21.4R3-S8-EVO, 22.2R3-S5-EVO, 22.4R3-EVO, 23.2R2-EVO, and 23.4R1-EVO. 6. Severity Assessment: - CVSS v3.1: 6.5 - CVSS v4.0: 7.1 7. Affected Configuration Options: - - - - - 8. Workarounds: - No known workarounds. 9. Related Links: - Overview of Juniper Networks SIRT’s quarterly security bulletin release process (KB16613) - Which versions fix the vulnerability (KB16765) - CVSS and Juniper vulnerability bulletins (KB16446) - How to report a security vulnerability (Report a Security Vulnerability) This information helps in understanding the nature, scope of impact, and mitigation steps for the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

Juniper Junos OS Evolved QFX5000 Unauthenticated DoS via MAC Limit (CVE-2024-47498)