CVE-2022-22231
An Unchecked Return Value to NULL Pointer Dereference vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On SRX Series if Unified Threat Management (UTM) Enhanced Content Filtering (CF) and AntiVirus (AV) are enabled together and the system processes specific valid transit traffic the Packet Forwarding Engine (PFE) will crash and restart. This issue affects Juniper Networks Junos OS 21.4 versions prior to 21.4R1-S2, 21.4R2 on SRX Series. This issue does not affect Juniper Networks Junos OS versions prior to 21.4R1.
Published:Oct 18, 2022
Last Modified:May 12, 2025
EPS:Oct 18, 2022
EPSS Score:0.00283
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Juniper
Product
Junos
Juniper
Junos
Vendor
Juniper
Product
Srx1500
Juniper
Srx1500
Vendor
Juniper
Product
Srx4100
Juniper
Srx4100
Vendor
Juniper
Product
Srx4200
Juniper
Srx4200
Vendor
Juniper
Product
Srx4600
Juniper
Srx4600
Vendor
Juniper
Product
Srx5400
Juniper
Srx5400
Vendor
Juniper
Product
Srx550
Juniper
Srx550
Vendor
Juniper
Product
Srx5600
Juniper
Srx5600
Vendor
Juniper
Product
Srx5800
Juniper
Srx5800
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
