Juniper Junos OS BGP ASN 0 Vulnerability (CVE-2024-47507)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-47507 2. Affected Products: Junos OS and Junos OS Evolved 3. Affected Versions: - Junos OS: All versions, including but not limited to 21.4R3-S6, 22.2R3-S3, and 22.4R3 - Junos OS Evolved: All versions, including but not limited to 21.4R3-S7-EVO, 22.2R3-S4-EVO, and 22.4R3-EVO 4. Issue Description: Accepting aggregate attributes in BGP update messages with an ASN value of zero (0), which may cause issues for downstream BGP peers. 5. Solution: Updates for affected Junos OS Evolved and Junos OS versions. 6. Severity: Medium (CVSS v3.1: 5.8, CVSS v4.0: 6.9) 7. Affected Configuration: Requires minimal BGP configuration, such as 8. Workarounds: No known workarounds. 9. Related Information: - KB16446: Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories - KB16613: Overview of the Juniper Networks SIRT Quarterly Security Bulletin Publication Process - KB16765: In which releases are vulnerabilities fixed? - KB16446: Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories - Report a Security Vulnerability - How to Contact the Juniper Networks Security Incident Response Team This information helps users understand the vulnerability details, affected products and versions, available solutions, and how to report or contact Juniper Networks’ Security Incident Response Team.

Goal Reached Thanks to every supporter — we hit 100%!

Juniper Junos OS BGP ASN 0 Vulnerability (CVE-2024-47507)