CVE-2026-102047

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS L2CP Denial of Service

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent to an MVRP-enabled interface.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102047

EUVD

EUVD-2026-101371

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1288	The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Validation of Consistency within Input issue in Juniper Networks Junos OS and Junos OS Evolved. It exists in the l2cpd process and allows an adjacent unauthenticated Layer 2 attacker to disrupt Layer 2 control protocols by sending a specially crafted MVRP Ethernet frame to an MVRP-enabled interface, causing a denial of service.

Detection Guidance

This vulnerability involves crafted MVRP Ethernet frames targeting Juniper Junos OS and Junos OS Evolved systems. Detection requires monitoring for unusual Layer 2 traffic patterns or protocol anomalies on MVRP-enabled interfaces. Juniper recommends inspecting logs for l2cpd process crashes or unexpected behavior. Use commands like 'show system processes extensive | match l2cpd' to check process status and 'show ethernet-switching mvrp statistics' to review MVRP protocol statistics for errors or anomalies.

Impact Analysis

This vulnerability can cause network disruptions by crashing Layer 2 control protocols, leading to loss of network connectivity or services that rely on these protocols. It requires the attacker to be on the same Layer 2 network segment as the target device.

Compliance Impact

This vulnerability causes a denial of service in Layer 2 control protocols, which could disrupt network availability. For GDPR, availability is a key principle, so prolonged outages may impact compliance. HIPAA requires safeguards for data availability, and this vulnerability could lead to unauthorized disruptions affecting protected health information access.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved security patches from Juniper Networks to address the improper validation in the l2cpd process. Disable MVRP on affected interfaces if not required, as the vulnerability is triggered via crafted MVRP Ethernet frames.

Hi! I’m here to help you understand CVE-2026-102047. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70