CVE-2024-47489— Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE
Quick assessment
Affected
Juniper Networks Junos OS Evolved
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks Junos OS Evolved是美国瞻博网络（Juniper Networks）公司的Junos OS 的升级版系统。 Juniper Networks Junos OS Evolved存在安全漏洞，该漏洞源于对异常情况处理不当。
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1498.002 · Reflection Amplification
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-47489
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE
Source: CVE Program / CVE List V5
Vulnerability Description
An Improper Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of the Juniper Networks Junos OS Evolved on ACX Series devices allows an unauthenticated, network based attacker sending specific transit protocol traffic to cause a partial Denial of Service (DoS) to downstream devices.
Receipt of specific transit protocol packets is incorrectly processed by the Routing Engine (RE), filling up the DDoS protection queue which is shared between routing protocols. This influx of transit protocol packets causes DDoS protection violations, resulting in protocol flaps which can affect connectivity to networking devices.
This issue affects both IPv4 and IPv6. This issue does not require any specific routing protocol to be configured or enabled.
The following commands can be used to monitor the DDoS protection queue:
labuser@re0> show evo-pfemand host pkt-stats
labuser@re0> show host-path ddos all-policers
This issue affects Junos OS Evolved:
* All versions before 21.4R3-S8-EVO,
* from 22.2 before 22.2R3-S4-EVO,
* from 22.3 before 22.3R3-S4-EVO,
* from 22.4 before 22.4R3-S3-EVO,
* from 23.2 before 23.2R2-EVO,
* from 23.4 before 23.4R1-S1-EVO, 23.4R2-EVO,
* from 24.2 before 24.2R2-EVO.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
对异常条件的处理不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Junos OS Evolved 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS Evolved是美国瞻博网络（Juniper Networks）公司的Junos OS 的升级版系统。 Juniper Networks Junos OS Evolved存在安全漏洞，该漏洞源于对异常情况处理不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS Evolved | 0 ~ 21.4R3-S8-EVO | - |
|
II. Public POCs for CVE-2024-47489
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-47489
请登录查看更多情报信息。
Same Patch Batch · Juniper Networks · 2024-10-11 · 25 CVEs total
| CVE-2024-47490 | 8.2 HIGH | Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resourc |
| CVE-2024-47504 | 7.5 HIGH | Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash |
| CVE-2024-47502 | 7.5 HIGH | Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to |
| CVE-2024-39547 | 7.5 HIGH | Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU u |
| CVE-2024-47499 | 7.5 HIGH | Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute |
| CVE-2024-47497 | 7.5 HIGH | Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffi |
| CVE-2024-39563 | 7.3 HIGH | Junos Space: Remote Command Execution (RCE) vulnerability in web application |
| CVE-2024-47495 | 6.7 MEDIUM | Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privil |
| CVE-2024-39526 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Serie |
| CVE-2024-47509 | 6.5 MEDIUM | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a |
| CVE-2024-47508 | 6.5 MEDIUM | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a |
| CVE-2024-47505 | 6.5 MEDIUM | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a |
| CVE-2024-47503 | 6.5 MEDIUM | Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd cras |
| CVE-2024-47498 | 6.5 MEDIUM | Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effec |
| CVE-2024-47493 | 6.5 MEDIUM | Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC |
| CVE-2024-47506 | 5.9 MEDIUM | Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a |
| CVE-2024-47491 | 5.9 MEDIUM | Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to |
| CVE-2024-47494 | 5.9 MEDIUM | Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset |
| CVE-2024-47507 | 5.8 MEDIUM | Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an |
| CVE-2024-47496 | 5.5 MEDIUM | Junos OS: MX Series: The PFE will crash on running specific command |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Junos OS Evolved
-
CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil -
CVE-2026-57028
Junos OS Evolved: A port which has been inadvertently expose -
CVE-2026-33803
Junos OS Evolved: A port which has been inadvertently expose -
CVE-2026-33794
Junos OS Evolved: PTX Series: Receipt of repeated ECMP routi -
CVE-2026-33783
Junos OS Evolved: PTX Series: If SRTE tunnels provisioned vi
Same vendor: Juniper Networks
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil
Same weakness: CWE-755
-
CVE-2026-63450
Suricata ftp: RETR/STOR before PORT/PASV can disable further -
CVE-2026-81515
Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp fie -
CVE-2026-81516
Steeltoe.Discovery.Consul: malformed 'secure' metadata abort -
CVE-2026-89025
Hirschmann HiOS Switch Platform DoS via Malformed HTTP Reque -
CVE-2026-49305
Huawei HarmonyOS 异常处理不当漏洞
V. Comments for CVE-2024-47489
No comments yet