CVE-2026-102047
Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS L2CP Denial of Service

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent to an MVRP-enabled interface.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-11-08
AI Q&A
2026-10-15
EPSS Evaluated
2026-11-07
NVD
CVE-2026-102047
EUVD
EUVD-2026-101371

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1288 The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Validation of Consistency within Input issue in Juniper Networks Junos OS and Junos OS Evolved. It exists in the l2cpd process and allows an adjacent unauthenticated Layer 2 attacker to disrupt Layer 2 control protocols by sending a specially crafted MVRP Ethernet frame to an MVRP-enabled interface, causing a denial of service.

Detection Guidance

This vulnerability involves crafted MVRP Ethernet frames targeting Juniper Junos OS and Junos OS Evolved systems. Detection requires monitoring for unusual Layer 2 traffic patterns or protocol anomalies on MVRP-enabled interfaces. Juniper recommends inspecting logs for l2cpd process crashes or unexpected behavior. Use commands like 'show system processes extensive | match l2cpd' to check process status and 'show ethernet-switching mvrp statistics' to review MVRP protocol statistics for errors or anomalies.

Impact Analysis

This vulnerability can cause network disruptions by crashing Layer 2 control protocols, leading to loss of network connectivity or services that rely on these protocols. It requires the attacker to be on the same Layer 2 network segment as the target device.

Compliance Impact

This vulnerability causes a denial of service in Layer 2 control protocols, which could disrupt network availability. For GDPR, availability is a key principle, so prolonged outages may impact compliance. HIPAA requires safeguards for data availability, and this vulnerability could lead to unauthorized disruptions affecting protected health information access.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved security patches from Juniper Networks to address the improper validation in the l2cpd process. Disable MVRP on affected interfaces if not required, as the vulnerability is triggered via crafted MVRP Ethernet frames.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102047. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...