Vulnerability Name:

CVE-2022-22227 (CCN-238457)

Assigned:2021-12-21
Published:2022-10-12
Updated:2022-10-21
Summary:An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated network-based attacker to cause a partial Denial of Service (DoS). On receipt of specific IPv6 transit traffic, Junos OS Evolved on ACX7100-48L, ACX7100-32C and ACX7509 sends this traffic to the Routing Engine (RE) instead of forwarding it, leading to increased CPU utilization of the RE and a partial DoS. This issue only affects systems configured with IPv6. This issue does not affect ACX7024 which is supported from 22.3R1-EVO onwards where the fix has already been incorporated as indicated in the solution section. This issue affects Juniper Networks Junos OS Evolved on ACX7100-48L, ACX7100-32C, ACX7509: 21.1-EVO versions prior to 21.1R3-S2-EVO; 21.2-EVO versions prior to 21.2R3-S2-EVO; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R1-S1-EVO, 21.4R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 21.1R1-EVO.
CVSS v3 Severity:5.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
4.6 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-754
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2022-22227

Source: XF
Type: UNKNOWN
juniper-cve202222227-dos(238457)

Source: CONFIRM
Type: Vendor Advisory
https://kb.juniper.net/JSA69878

Source: CCN
Type: Juniper Networks Security Bulletin JSA69878
Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which will cause increased CPU utilization (CVE-2022-22227)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*
  • AND
  • cpe:/h:juniper:acx7100-48l:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:acx7509:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:acx7100-32c:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    juniper junos os evolved 21.1 r1
    juniper junos os evolved 21.1 r2
    juniper junos os evolved 21.1 r1-s1
    juniper junos os evolved 21.2 r1
    juniper junos os evolved 21.2 r1-s1
    juniper junos os evolved 21.2 r2
    juniper junos os evolved 21.1 -
    juniper junos os evolved 21.3 r1
    juniper junos os evolved 21.2 -
    juniper junos os evolved 21.4 -
    juniper junos os evolved 21.4 r1
    juniper junos os evolved 21.3 r2-s2
    juniper junos os evolved 21.3 r2-s1
    juniper junos os evolved 21.3 -
    juniper junos os evolved 21.3 r1-s1
    juniper junos os evolved 21.3 r2
    juniper junos os evolved 21.2 r3-s1
    juniper junos os evolved 21.2 r1-s2
    juniper junos os evolved 21.2 r2-s1
    juniper junos os evolved 21.2 r2-s2
    juniper junos os evolved 21.2 r3
    juniper junos os evolved 21.1 r3
    juniper junos os evolved 21.1 r3-s1
    juniper acx7100-48l -
    juniper acx7509 -
    juniper acx7100-32c -