CVE Feed

    Dashboard / CVE / CVE-2024-47501

    CVE-2024-47501

    A NULL Pointer Dereference vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C allows a locally authenticated attacker with low privileges to cause a Denial of Service (DoS). In a VPLS or Junos Fusion scenario, the execution of specific show commands will cause all FPCs hosting VPLS sessions or connecting to satellites to crash and restart. This issue affects Junos on MX304, MX with MPC10/11/LC9600 and EX9200 with EX9200-15C:  * All version before 21.2R3-S1, * 21.3 versions before 21.3R3,  * 21.4 versions before 21.4R2.

    Published:Oct 11, 2024
    Last Modified:Jan 26, 2026
    EPS:Oct 11, 2024
    EPSS Score:0.00054
    CVSS Score:5.5

    Affected Products

    Vendor
    Juniper
    Product
    Ex9200
    Vendor
    Juniper
    Product
    Ex9200-15c
    Vendor
    Juniper
    Product
    Junos
    Vendor
    Juniper
    Product
    Mpc10e-10c
    Vendor
    Juniper
    Product
    Mpc10e-15c
    Vendor
    Juniper
    Product
    Mpc11
    Vendor
    Juniper
    Product
    Mx10003
    Vendor
    Juniper
    Product
    Mx10004
    Vendor
    Juniper
    Product
    Mx10008
    Vendor
    Juniper
    Product
    Mx10016
    Vendor
    Juniper
    Product
    Mx2008
    Vendor
    Juniper
    Product
    Mx2010
    Vendor
    Juniper
    Product
    Mx240
    Vendor
    Juniper
    Product
    Mx304
    Vendor
    Juniper
    Product
    Mx480
    Vendor
    Juniper
    Product
    Mx960
    Vendor
    Juniper Networks
    Product
    Junos Os

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-30650 (CVSS 8.4) — A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos O…
    CVE-2024-39526 (CVSS 7.1) — An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS…
    CVE-2024-21620 (CVSS 8.8) — An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J-Web…
    CVE-2024-21619 (CVSS 5.3) — A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Conta…
    CVE-2024-21607 (CVSS 5.3) — An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series al…
    CVE-2023-44191 (CVSS 7.5) — An Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an …
    CVE-2023-36851 (CVSS 5.3) — A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows…
    CVE-2023-36844 (CVSS 5.3) — A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows a…
    CVE-2023-36847 (CVSS 5.3) — A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows …
    CVE-2022-22221 (CVSS 7.8) — An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High