CVE-2024-47496
A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service (DoS). When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the system self-recovers. Repeated execution will create a sustained DoS condition. This issue only affects MX Series devices with Line cards MPC1-MPC9. This issue affects: Junos OS on MX Series: * All versions before 21.4R3-S9, * from 22.2 before 22.2R3-S5, * from 22.3 before 22.3R3-S4, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2-S1, * from 23.4 before 23.4R2.
Published:Oct 11, 2024
Last Modified:Jan 26, 2026
EPS:Oct 11, 2024
EPSS Score:0.00053
CVSS Score:5.5
Affected Products
Vendor
Product
Action
Vendor
Juniper
Product
2x100ge \+ 4x10ge Mpc5e
Juniper
2x100ge \+ 4x10ge Mpc5e
Vendor
Juniper
Product
2x100ge \+ 4x10ge Mpc5eq
Juniper
2x100ge \+ 4x10ge Mpc5eq
Vendor
Juniper
Product
2x100ge \+ 8x10ge Mpc4e
Juniper
2x100ge \+ 8x10ge Mpc4e
Vendor
Juniper
Product
32x10ge Mpc4e
Juniper
32x10ge Mpc4e
Vendor
Juniper
Product
6x40ge \+ 24x10ge Mpc5e
Juniper
6x40ge \+ 24x10ge Mpc5e
Vendor
Juniper
Product
6x40ge \+ 24x10ge Mpc5eq
Juniper
6x40ge \+ 24x10ge Mpc5eq
Vendor
Juniper
Product
Junos
Juniper
Junos
Vendor
Juniper
Product
Mpc1
Juniper
Mpc1
Vendor
Juniper
Product
Mpc1 Q
Juniper
Mpc1 Q
Vendor
Juniper
Product
Mpc1e
Juniper
Mpc1e
Vendor
Juniper
Product
Mpc1e Q
Juniper
Mpc1e Q
Vendor
Juniper
Product
Mpc2
Juniper
Mpc2
Vendor
Juniper
Product
Mpc2 Eq
Juniper
Mpc2 Eq
Vendor
Juniper
Product
Mpc2 Q
Juniper
Mpc2 Q
Vendor
Juniper
Product
Mpc2e
Juniper
Mpc2e
Vendor
Juniper
Product
Mpc2e Eq
Juniper
Mpc2e Eq
Vendor
Juniper
Product
Mpc2e Ng
Juniper
Mpc2e Ng
Vendor
Juniper
Product
Mpc2e Ng Q
Juniper
Mpc2e Ng Q
Vendor
Juniper
Product
Mpc2e P
Juniper
Mpc2e P
Vendor
Juniper
Product
Mpc2e Q
Juniper
Mpc2e Q
Vendor
Juniper
Product
Mpc3e
Juniper
Mpc3e
Vendor
Juniper
Product
Mpc3e-3d-ng
Juniper
Mpc3e-3d-ng
Vendor
Juniper
Product
Mpc3e-3d-ng-q
Juniper
Mpc3e-3d-ng-q
Vendor
Juniper
Product
Mpc6e
Juniper
Mpc6e
Vendor
Juniper
Product
Mpc7e-10g
Juniper
Mpc7e-10g
Vendor
Juniper
Product
Mpc7e-mrate
Juniper
Mpc7e-mrate
Vendor
Juniper
Product
Mpc8e
Juniper
Mpc8e
Vendor
Juniper
Product
Mpc9e
Juniper
Mpc9e
Vendor
Juniper
Product
Mx2008
Juniper
Mx2008
Vendor
Juniper
Product
Mx2010
Juniper
Mx2010
Vendor
Juniper
Product
Mx240
Juniper
Mx240
Vendor
Juniper
Product
Mx480
Juniper
Mx480
Vendor
Juniper
Product
Mx960
Juniper
Mx960
Vendor
Juniper Networks
Product
Junos Os
Juniper Networks
Junos Os
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
