CVE-2023-28985 : An Improper Validation of Syntactic Correctness of Input vulnerability in Intrus

An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention (IDP) of Juniper Networks SRX Series and MX Series allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). Continued receipt of this specific packet will cause a sustained Denial of Service condition. On all SRX Series and MX Series platforms, where IDP is enabled and a specific malformed SSL packet is received, the SSL detector crashes leading to an FPC core. This issue affects Juniper Networks SRX Series and MX Series prior to SigPack 3598. In order to identify the current SigPack version, following command can be used: user@junos# show security idp security-package-version

Published 2023-07-14 17:15:09

Updated 2023-07-27 13:02:51

Source Juniper Networks, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2023-28985

Juniper » Junos » Version: N/A
cpe:2.3:o:juniper:junos:-:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Vsrx » Version: N/A
When used together with: Juniper » Csrx » Version: N/A
When used together with: Juniper » Mx10 » Version: N/A
When used together with: Juniper » Mx10000 » Version: N/A
When used together with: Juniper » Mx10003 » Version: N/A
When used together with: Juniper » Mx10008 » Version: N/A
When used together with: Juniper » Mx10016 » Version: N/A
When used together with: Juniper » Mx104 » Version: N/A
When used together with: Juniper » Mx150 » Version: N/A
When used together with: Juniper » Mx2008 » Version: N/A
When used together with: Juniper » Mx2010 » Version: N/A
When used together with: Juniper » Mx2020 » Version: N/A
When used together with: Juniper » Mx204 » Version: N/A
When used together with: Juniper » Mx240 » Version: N/A
When used together with: Juniper » Mx40 » Version: N/A
When used together with: Juniper » Mx480 » Version: N/A
When used together with: Juniper » MX5 » Version: N/A
When used together with: Juniper » Mx80 » Version: N/A
When used together with: Juniper » Mx960 » Version: N/A
When used together with: Juniper » Srx100 » Version: N/A
When used together with: Juniper » Srx110 » Version: N/A
When used together with: Juniper » Srx1400 » Version: N/A
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx210 » Version: N/A
When used together with: Juniper » Srx220 » Version: N/A
When used together with: Juniper » Srx240 » Version: N/A
When used together with: Juniper » Srx240h2 » Version: N/A
When used together with: Juniper » Srx240m » Version: N/A
When used together with: Juniper » Srx300 » Version: N/A
When used together with: Juniper » Srx320 » Version: N/A
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx3400 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
When used together with: Juniper » Srx3600 » Version: N/A
When used together with: Juniper » Srx380 » Version: N/A
When used together with: Juniper » Srx4000 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx4600 » Version: N/A
When used together with: Juniper » Srx5000 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx550 Hm » Version: N/A
When used together with: Juniper » Srx550m » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
When used together with: Juniper » Srx650 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-28985

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 34 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-28985

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	Juniper Networks, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2023-28985

CWE-1286 Improper Validation of Syntactic Correctness of Input

The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

Assigned by: sirt@juniper.net (Primary)

References for CVE-2023-28985

https://supportportal.juniper.net/JSA71662

2023-07 Security Bulletin: SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received (CVE-2023-28985)
Vendor Advisory

Jump to

Vulnerability Details : CVE-2023-28985

Products affected by CVE-2023-28985

Exploit prediction scoring system (EPSS) score for CVE-2023-28985

CVSS scores for CVE-2023-28985

CWE ids for CVE-2023-28985

References for CVE-2023-28985