Skip to content
OpenAdvisories
High · 7.1 CVE-2026-103411 EUVD-2026-112208GHSA-qfqf-wwr7-vhxm

Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing

Published Oct 28, 2026 · Updated Nov 5, 2026 · Assigned by juniper

Description

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply.

Affected products

VendorProductAffectedFixed
Juniper Networks Session Smart Router < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 7.0.5

Advisories 2

References