Vulnerability Details : CVE-2024-39530
An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis management daemon (chassisd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a
Denial-of-Service (DoS).
If an attempt is made to access specific sensors on platforms not supporting these sensors, either via GRPC or netconf, chassisd will crash and restart leading to a restart of all FPCs and thereby a complete outage.
This issue affects Junos OS:
* 21.4 versions from 21.4R3 before 21.4R3-S5,
* 22.1 versions from 22.1R3 before 22.1R3-S4,
* 22.2 versions from 22.2R2 before 22.2R3,
* 22.3 versions from 22.3R1 before 22.3R2-S2, 22.3R3,
* 22.4 versions from 22.4R1 before 22.4R2.
This issue does not affect Junos OS versions earlier than 21.4.
Vulnerability category: Denial of service
Products affected by CVE-2024-39530
- cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2024-39530
0.28%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 51 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2024-39530
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST | 2024-09-23 |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
Juniper Networks, Inc. | 2024-07-11 |
|
8.7
|
HIGH | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/V... |
N/A
|
N/A
|
Juniper Networks, Inc. | 2024-07-11 |
CWE ids for CVE-2024-39530
-
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.Assigned by:
- nvd@nist.gov (Primary)
- sirt@juniper.net (Secondary)
References for CVE-2024-39530
-
https://supportportal.juniper.net/JSA82989
Article DetailVendor Advisory
Jump to