Description
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device.
Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets.
This issue affects Junos OS Evolved:
* all versions before 23.2R2-S7-EVO,
* 23.4 versions before 23.4R2-S8-EVO,
* 24.2 versions before 24.2R2-S5-EVO,
* 24.4 versions before 24.4R2-S4-EVO,
* 25.2 versions before 25.2R2-S1-EVO,
* 25.4 versions before 25.4R1-S2-EVO.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Junos OS Evolved | < 23.2R2-S7-EVO, 23.4 – < 23.4R2-S8-EVO, 24.2 – < 24.2R2-S5-EVO, 24.4 – < 24.4R2-S4-EVO, 25.2 – < 25.2R2-S1-EVO, 25.4 – < 25.4R1-S2-EVO | 23.2R2-S7-EVO |
Advisories 2
- NCSC-2026-0224 Kwetsbaarheden verholpen in Juniper Networks Junos OS en Junos OS Evolved NCSC-NL (Netherlands) · Jul 13, 2026
- WID-SEC-2026-2257 Juniper JUNOS und JUNOS Evolved: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2026
References
- https://supportportal.juniper.net/JSA110078 vendor-advisory