Juniper Junos OS NULL Pointer Dereference Causing FPC Crash

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Affected Products: All versions of Junos OS; affected platforms include MX304, MX with MPC10/11/LC9600, EX9200, and EX9200-15C. - Issue: Executing specific commands in VPLS or Junos Fusion scenarios causes the FPC (Fabric Path Controller) to crash and restart. - Impact Scope: Affected Junos OS versions include: - MX304 and MX with MPC10/11/LC9600: All versions prior to 21.2R3-S1, all 21.3 versions prior to 21.3R3, and all 21.4 versions prior to 21.4R2. 2. Vulnerability Type: - Type: NULL Pointer Dereference vulnerability. - Severity: Medium. 3. Solution: - Fixed Software Versions: 21.2R3-S1, 21.3R3, 21.4R2, 22.1R1, and later versions. - Tracking Number: 1619137. 4. Mechanism: - Trigger Condition: Executing specific commands in VPLS or Junos Fusion configurations leads to FPC crash and restart. 5. Mitigation Measures: - Recommendation: Use access lists or firewall filters to restrict access to the device, allowing only trusted networks, hosts, and users with management privileges. 6. Related Links: - CVSS Score: CVSS v3.1: 5.5, CVSS v4.0: 6.8. - Related Knowledge Base Articles: KB16613, KB16765, KB16446, Report Security Vulnerabilities, etc. This information helps users understand the vulnerability's details, scope of impact, available fixes, and mitigation strategies to reduce associated risks.

Goal Reached Thanks to every supporter — we hit 100%!

Juniper Junos OS NULL Pointer Dereference Causing FPC Crash