CVE-2024-30389 : An Incorrect Behavior Order vulnerability in the Packet Forwarding Engine (PFE)

An Incorrect Behavior Order vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on EX4300 Series allows an unauthenticated, network-based attacker to cause an integrity impact to networks downstream of the vulnerable device. When an output firewall filter is applied to an interface it doesn't recognize matching packets but permits any traffic. This issue affects Junos OS 21.4 releases from 21.4R1 earlier than 21.4R3-S6. This issue does not affect Junos OS releases earlier than 21.4R1.

Published 2024-04-12 16:15:38

Updated 2025-02-06 20:36:24

Source Juniper Networks, Inc.

View at NVD, CVE.org

Products affected by CVE-2024-30389

Juniper » Junos » Version: 21.4 Update R1
cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R1-s1
cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R1-s2
cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R2
cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R2-s1
cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R2-s2
cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R3
cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R3-s1
cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R3-s2
cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R3-s3
cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R3-s4
cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A
Juniper » Junos » Version: 21.4 Update R3-s5
cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4300-24p » Version: N/A
When used together with: Juniper » Ex4300-24p-s » Version: N/A
When used together with: Juniper » Ex4300-24t » Version: N/A
When used together with: Juniper » Ex4300-24t-s » Version: N/A
When used together with: Juniper » Ex4300-32f » Version: N/A
When used together with: Juniper » Ex4300-32f-dc » Version: N/A
When used together with: Juniper » Ex4300-32f-s » Version: N/A
When used together with: Juniper » Ex4300-48mp » Version: N/A
When used together with: Juniper » Ex4300-48mp-s » Version: N/A
When used together with: Juniper » Ex4300-48p » Version: N/A
When used together with: Juniper » Ex4300-48p-s » Version: N/A
When used together with: Juniper » Ex4300-48t » Version: N/A
When used together with: Juniper » Ex4300-48t-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-dc » Version: N/A
When used together with: Juniper » Ex4300-48t-dc-afi » Version: N/A
When used together with: Juniper » Ex4300-48t-s » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2024-30389

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 17 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2024-30389

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.8	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N	3.9	1.4	Juniper Networks, Inc.	2024-04-12
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: Low Availability: None
6.9	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/V...	N/A	N/A	Juniper Networks, Inc.	2025-02-06
Attack Vector: Network Attack Complexity: Low Attack Requirements: None Privileges Required: None User Interaction: None Confidentiality (VC): None Integrity (VI): None Availability (VA): None

CWE ids for CVE-2024-30389

CWE-696 Incorrect Behavior Order

The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways which may produce resultant weaknesses.

Assigned by: sirt@juniper.net (Secondary)

References for CVE-2024-30389

https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Common Vulnerability Scoring System Version 4.0 Calculator
Issue Tracking

CVEs referencing this url
http://supportportal.juniper.net/JSA79185

Article Detail
Vendor Advisory

Jump to

Vulnerability Details : CVE-2024-30389

Products affected by CVE-2024-30389

Exploit prediction scoring system (EPSS) score for CVE-2024-30389

CVSS scores for CVE-2024-30389

CWE ids for CVE-2024-30389

References for CVE-2024-30389