{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-18T01:47:52.586","vulnerabilities":[{"cve":{"id":"CVE-2024-21605","sourceIdentifier":"sirt@juniper.net","published":"2024-04-12T15:15:23.577","lastModified":"2025-02-06T16:58:10.283","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).\n\n\n\nSpecific valid link-local traffic is not blocked on ports in STP blocked state but is instead sent to the control plane of the device. This leads to excessive resource consumption and in turn severe impact on all control and management protocols of the device.\n\n\n\nThis issue affects Juniper Networks Junos OS:\n  *  21.2 version 21.2R3-S3 and later versions earlier than 21.2R3-S6;\n  *  22.1 version 22.1R3 and later versions earlier than 22.1R3-S4;\n  *  22.2 version \n\n22.2R2\n\nand later versions earlier than 22.2R3-S2;\n  *  22.3 version \n\n22.3R2 \n\nand later versions earlier than 22.3R3-S1;\n\n  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;\n  *  23.2 versions earlier than 23.2R1-S1, 23.2R2.\n\n\n\n\nThis issue does not affect Juniper Networks Junos OS 21.4R1 and later versions of 21.4."},{"lang":"es","value":"Una vulnerabilidad de exposición de recursos a una esfera incorrecta en el motor de reenvío de paquetes (PFE) de Juniper Networks Junos OS en la serie SRX 300 permite que un atacante adyacente no autenticado provoque una denegación de servicio (DoS). El tráfico de enlace local válido específico no se bloquea en los puertos en estado bloqueado STP, sino que se envía al plano de control del dispositivo. Esto conduce a un consumo excesivo de recursos y, a su vez, a un impacto severo en todos los protocolos de control y gestión del dispositivo. Este problema afecta a Juniper Networks Junos OS: * 21.2 versión 21.2R3-S3 y versiones posteriores anteriores a 21.2R3-S6; * 22.1 versión 22.1R3 y versiones posteriores anteriores a 22.1R3-S4; * 22.2 versión 22.2R2 y versiones posteriores anteriores a 22.2R3-S2; * 22.3 versión 22.3R2 y versiones posteriores anteriores a 22.3R3-S1; * Versiones 22.4 anteriores a 22.4R2-S2, 22.4R3; * Versiones 23.2 anteriores a 23.2R1-S1, 23.2R2. Este problema no afecta a Juniper Networks Junos OS 21.4R1 y versiones posteriores de 21.4."}],"metrics":{"cvssMetricV40":[{"source":"sirt@juniper.net","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"sirt@juniper.net","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"sirt@juniper.net","type":"Secondary","description":[{"lang":"en","value":"CWE-668"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*","matchCriteriaId":"39E44B09-7310-428C-8144-AE9DB0484D1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*","matchCriteriaId":"53938295-8999-4316-9DED-88E24D037852"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*","matchCriteriaId":"2307BF56-640F-49A8-B060-6ACB0F653A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*","matchCriteriaId":"B3124DD0-9E42-4896-9060-CB7DD07FC342"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*","matchCriteriaId":"44F6FD6C-03AF-4D2C-B411-A753DE12A2DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*","matchCriteriaId":"D49FFB60-BA71-4902-9404-E67162919ADC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*","matchCriteriaId":"EFF72FCA-C440-4D43-9BDB-F712DB413717"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*","matchCriteriaId":"E37D4694-C80B-475E-AB5B-BB431F59C5E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*","matchCriteriaId":"5EC0D2D2-4922-4675-8A2C-57A08D7BE334"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*","matchCriteriaId":"9EC91F9D-DEDA-46B4-A39F-59A2CDB86C2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*","matchCriteriaId":"591AA3E6-62A2-4A1A-A04C-E808F71D8B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*","matchCriteriaId":"786F993E-32CB-492A-A7CC-A7E4F48EA8B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*","matchCriteriaId":"59DDA54E-6845-47EB-AE3C-5EC6BD33DFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*","matchCriteriaId":"574730B0-56C8-4A03-867B-1737148ED9B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.3:r2-s2:*:*:*:*:*:*","matchCriteriaId":"20EBC676-1B26-4A71-8326-0F892124290A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:*","matchCriteriaId":"FB4C0FBF-8813-44E5-B71A-22CBAA603E2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*","matchCriteriaId":"1379EF30-AF04-4F98-8328-52A631F24737"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*","matchCriteriaId":"28E42A41-7965-456B-B0AF-9D3229CE4D4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*","matchCriteriaId":"CB1A77D6-D3AD-481B-979C-8F778530B175"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*","matchCriteriaId":"3A064B6B-A99B-4D8D-A62D-B00C7870BC30"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*","matchCriteriaId":"40813417-A938-4F74-A419-8C5188A35486"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*","matchCriteriaId":"7FC1BA1A-DF0E-4B15-86BA-24C60E546732"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*","matchCriteriaId":"1A78CC80-E8B1-4CDA-BB35-A61833657FA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*","matchCriteriaId":"4B3B2FE1-C228-46BE-AC76-70C2687050AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*","matchCriteriaId":"BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*","matchCriteriaId":"80F9DC32-5ADF-4430-B1A6-357D0B29DB78"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*","matchCriteriaId":"8B82D4C4-7A65-409A-926F-33C054DCBFBA"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*","matchCriteriaId":"CE535749-F4CE-4FFA-B23D-BF09C92481E5"},{"vulnerable":false,"criteria":"cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*","matchCriteriaId":"2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"}]}]}],"references":[{"url":"https://supportportal.juniper.net/JSA75746","source":"sirt@juniper.net","tags":["Vendor Advisory"]},{"url":"https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","source":"sirt@juniper.net","tags":["Not Applicable"]},{"url":"https://supportportal.juniper.net/JSA75746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}}]}