Executive Summary

This vulnerability is an Incorrect Initialization of Resource issue in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models. It allows an unauthenticated, network-based attacker to send a high volume of traffic to the device, causing the FXPC component to crash and restart. This results in a Denial-of-Service (DoS) condition, leading to a complete service outage until the device automatically restarts.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is a Denial-of-Service (DoS) on affected Juniper EX4000 devices. An attacker can cause the device to crash and restart by sending a high volume of traffic, resulting in a complete service outage during the restart period. This can disrupt network availability and services relying on the affected device.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring for device reboots with the specific reboot reason 'reason=0x4000002 reason_string=0x4000002:watchdog + panic with core dump'. You can use the command 'show chassis routing-engine' on affected Juniper EX4000 devices to check for this reboot reason in the output and logs.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include upgrading the Junos OS on affected EX4000-48T, EX4000-48P, and EX4000-48MP devices to versions 24.4R2 or later, or 25.2R1-S2 or later, as these versions contain fixes for the vulnerability. Until the upgrade can be performed, limiting high volumes of traffic destined to the device may reduce the risk of triggering the Denial-of-Service condition.

Useful 0 Not Useful 0