CVE-2024-47501

Estado: AnalizadaMedia (6.8)—

A NULL Pointer Dereference vulnerability in the

packet forwarding engine (pfe) of Juniper Networks Junos OS on MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS).

In a VPLS or Junos Fusion scenario, the execution of specific show commands will cause all FPCs hosting VPLS sessions or connecting to satellites to crash and restart.

This issue affects Junos on MX304, MX with MPC10/11/LC9600 and EX9200 with EX9200-15C:

Detalles técnicos trazas, registros y código del informe original

  *  All version before 21.2R3-S1,
  *  21.3 versions before 21.3R3, 
  *  21.4 versions before 21.4R2.

CVSS

Versión: 4.0
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X
Puntuación base: 6.8

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.21%
Percentil entre todas las CVEs puntuadas: 10
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos

CWE

CWE-476

Referencias

https://supportportal.juniper.net/JSA88131

JSON original (NVD)

Mostrar

{
  "id": "CVE-2024-47501",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-47501",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-11T17:31:06.360464Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "AUTOMATIC",
          "baseScore": 6.8,
          "Automatable": "YES",
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "LOW",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "MODERATE",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "21.2R3-S1",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "21.3",
              "lessThan": "21.3R3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "21.4",
              "lessThan": "21.4R2",
              "versionType": "semver"
            }
          ],
          "platforms": [
            "MX304",
            "MX with MPC10/11/LC9600",
            "EX9200 with EX9200-15C"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-10-11T16:15:11.167",
  "references": [
    {
      "url": "https://supportportal.juniper.net/JSA88131",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sirt@juniper.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A NULL Pointer Dereference vulnerability in the \n\npacket forwarding engine (pfe) of Juniper Networks Junos OS on MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS).\n\nIn a VPLS or Junos Fusion scenario, the execution of specific show commands will cause all FPCs hosting VPLS sessions or connecting to satellites to crash and restart.\n\nThis issue affects Junos on MX304, MX with MPC10/11/LC9600 and EX9200 with EX9200-15C: \n\n\n\n  *  All version before 21.2R3-S1,\n  *  21.3 versions before 21.3R3, \n  *  21.4 versions before 21.4R2."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de desreferencia de puntero nulo en el motor de reenvío de paquetes (pfe) de Juniper Networks Junos OS en MX304, MX con MPC10/11/LC9600 y EX9200 con EX9200-15C permite que un atacante autenticado localmente con privilegios bajos provoque una denegación de servicio (DoS). En un escenario de VPLS o Junos Fusion, la ejecución de comandos show específicos provocará que todos los FPC que alojan sesiones VPLS o se conectan a satélites se bloqueen y reinicien. Este problema afecta a Junos en MX304, MX con MPC10/11/LC9600 y EX9200 con EX9200-15C: * Todas las versiones anteriores a 21.2R3-S1, * Versiones 21.3 anteriores a 21.3R3, * Versiones 21.4 anteriores a 21.4R2."
    }
  ],
  "lastModified": "2026-06-17T07:57:11.743",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "331C0F12-D9B9-483B-9EF0-28E48ED8346D",
              "versionEndExcluding": "21.2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "216E7DDE-453D-481F-92E2-9F8466CDDA3F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A52AF794-B36B-43A6-82E9-628658624B0A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3998DC76-F72F-4452-9150-652140B113EB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36ED4552-2420-45F9-B6E4-6DA2B2B12870"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C28A14E7-7EA0-4757-9764-E39A27CFDFA5"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A43752D-A4AF-4B4E-B95B-192E42883A5B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42986538-E9D0-4C2E-B1C4-A763A4EE451B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC78A4CB-D617-43FC-BB51-287D2D0C44ED"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30FF67F8-1E3C-47A8-8859-709B3614BA6E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C7C507E-C85E-4BC6-A3B0-549516BAB524"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6514CDE8-35DC-469F-89A3-078684D18F7A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4624565D-8F59-44A8-B7A8-01AD579745E7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79ED3CE8-CC57-43AB-9A26-BBC87816062D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9962B01C-C57C-4359-9532-676AB81CE8B0"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62178549-B679-4902-BFDB-2993803B7FCE"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D08A8D94-134A-41E7-8396-70D8B0735E9C"
            },
            {
              "criteria": "cpe:2.3:h:juniper:ex9200-15c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "320B2CF5-202D-4027-BFD9-F41A233B7401"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mpc10e-10c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A7B2B400-31BD-422C-9C7D-6F9CA94BA59D"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mpc10e-15c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "75DDC822-3BCC-44CF-9230-5D5EA09E4C09"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mpc11:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "349364B1-359A-4D53-87D6-C440BC1D95E1"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx10004:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "84F7BB7E-3A52-4C23-A4D2-50E75C912AFC"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C39DA74D-F5C7-4C11-857D-50631A110644"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "27175D9A-CA2C-4218-8042-835E25DFCA43"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx304:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3F7FB0CC-624D-4AB9-A7AC-BB19838C3B22"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "104858BD-D31D-40E0-8524-2EC311F10EAC"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}