CVE-2026-33786

Опубликовано: 09 апр. 2026

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

When a specific 'show chassis' CLI command is executed, chassisd crashes and restarts which causes a momentary impact to all traffic until all modules are online again.

This issue affects Junos OS on SRX1600, SRX2300 and SRX4300:

24.4 versions before 24.4R1-S3, 24.4R2.

This issue does not affect Junos OS versions before 24.4R1.

Ссылки

https://kb.juniper.net/JSA107810
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*

Одно из

cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.00095

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-754

Связанные уязвимости

GHSA-xh4h-63x5-gr2f

CVSS3: 5.5

github

4 месяца назад

An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300 and SRX4300 allows a local attacker with low privileges to cause a complete Denial of Service (DoS). When a specific 'show chassis' CLI command is executed, chassisd crashes and restarts which causes a momentary impact to all traffic until all modules are online again. This issue affects Junos OS on SRX1600, SRX2300 and SRX4300: * 24.4 versions before 24.4R1-S3, 24.4R2. This issue does not affect Junos OS versions before 24.4R1.

EPSS

Процентиль: 1%

0.00095

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-754