Unauthenticated Integrity Impact Vulnerability in Juniper Networks Junos OS on EX4300 Series

CVE-2024-30389

Summary

An Incorrect Behavior Order vulnerability exists within the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS, specifically impacting the EX4300 Series. This vulnerability enables an unauthenticated, network-based attacker to compromise the integrity of networks relying on the affected device. When output firewall filters are applied on interfaces, they fail to recognize certain matching packets, inadvertently allowing any traffic. This vulnerability impacts releases of Junos OS version 21.4 from 21.4R1 up to but not including 21.4R3-S6. Previous versions of Junos OS, released before 21.4R1, are not affected.

References