CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28961

An Improper Handling of Unexpected Data Type vulnerability in IPv6 firewall filter processing of Juniper Networks Junos OS on the ACX Series devices will prevent a firewall filter with the term 'from next-header ah' from being properly installed in the packet forwarding engine (PFE). There is no immediate indication of an incomplete firewall filter commit shown at the CLI, which could allow an attacker to send valid packets to or through the device that were explicitly intended to be dropped. An indication that the filter was not installed can be identified with the following logs: fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_rule_prepare : Config failed: Unsupported Ip-protocol 51 in the filter lo0.0-inet6-i fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_rule_prepare : Please detach the filter, remove unsupported match and re-attach fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_process_rule : Status:104 dnx_dfw_rule_prepare failed fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_process_filter : Status:104 dnx_dfw_process_rule failed fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_update_filter_in_hw : Status:104 Could not process filter(lo0.0-inet6-i) for rule expansion Unsupported match, action present. fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_create_hw_instance : Status:104 Could not program dfw(lo0.0-inet6-i) type(IFP_DFLT_INET6_Lo0_FILTER)! [104] fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_bind_shim : [104] Could not create dfw(lo0.0-inet6-i) type(IFP_DFLT_INET6_Lo0_FILTER) fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_update_resolve : [100] Failed to bind filter(3) to bind point fpc0 ACX_DFW_CFG_FAILED: ACX Error (dfw):dnx_dfw_change_end : dnx_dfw_update_resolve (resolve type) failed This issue affects Juniper Networks Junos OS on ACX Series: All versions prior to 20.2R3-S7; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S3; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 36.6%

CVSS Severity

CVSS v3 Score 5.8

References

Products affected by CVE-2023-28961

Juniper » Acx1000 » Version: N/A

cpe:2.3:h:juniper:acx1000:-
Juniper » Acx1100 » Version: N/A

cpe:2.3:h:juniper:acx1100:-
Juniper » Acx2000 » Version: N/A

cpe:2.3:h:juniper:acx2000:-
Juniper » Acx2100 » Version: N/A

cpe:2.3:h:juniper:acx2100:-
Juniper » Acx2200 » Version: N/A

cpe:2.3:h:juniper:acx2200:-
Juniper » Acx4000 » Version: N/A

cpe:2.3:h:juniper:acx4000:-
Juniper » Acx5000 » Version: N/A

cpe:2.3:h:juniper:acx5000:-
Juniper » Acx500 » Version: N/A

cpe:2.3:h:juniper:acx500:-
Juniper » Acx5048 » Version: N/A

cpe:2.3:h:juniper:acx5048:-
Juniper » Acx5096 » Version: N/A

cpe:2.3:h:juniper:acx5096:-
Juniper » Acx5400 » Version: N/A

cpe:2.3:h:juniper:acx5400:-
Juniper » Acx5448 » Version: N/A

cpe:2.3:h:juniper:acx5448:-
Juniper » Acx5800 » Version: N/A

cpe:2.3:h:juniper:acx5800:-
Juniper » Acx6300 » Version: N/A

cpe:2.3:h:juniper:acx6300:-
Juniper » Acx6360 » Version: N/A

cpe:2.3:h:juniper:acx6360:-
Juniper » Acx7100-32c » Version: N/A

cpe:2.3:h:juniper:acx7100-32c:-
Juniper » Acx7100-48l » Version: N/A

cpe:2.3:h:juniper:acx7100-48l:-
Juniper » Acx710 » Version: N/A

cpe:2.3:h:juniper:acx710:-
Juniper » Acx7509 » Version: N/A

cpe:2.3:h:juniper:acx7509:-
Juniper » Junos » Version: N/A

cpe:2.3:o:juniper:junos:-
Juniper » Junos » Version: 10.0

cpe:2.3:o:juniper:junos:10.0
Juniper » Junos » Version: 10.1

cpe:2.3:o:juniper:junos:10.1
Juniper » Junos » Version: 10.2

cpe:2.3:o:juniper:junos:10.2
Juniper » Junos » Version: 10.3

cpe:2.3:o:juniper:junos:10.3
Juniper » Junos » Version: 10.4

cpe:2.3:o:juniper:junos:10.4
Juniper » Junos » Version: 10.4r

cpe:2.3:o:juniper:junos:10.4r
Juniper » Junos » Version: 10.4s

cpe:2.3:o:juniper:junos:10.4s
Juniper » Junos » Version: 11.0

cpe:2.3:o:juniper:junos:11.0
Juniper » Junos » Version: 11.1

cpe:2.3:o:juniper:junos:11.1
Juniper » Junos » Version: 11.2

cpe:2.3:o:juniper:junos:11.2
Juniper » Junos » Version: 11.3

cpe:2.3:o:juniper:junos:11.3
Juniper » Junos » Version: 11.4

cpe:2.3:o:juniper:junos:11.4
Juniper » Junos » Version: 11.4r13

cpe:2.3:o:juniper:junos:11.4r13
Juniper » Junos » Version: 11.4x27

cpe:2.3:o:juniper:junos:11.4x27
Juniper » Junos » Version: 12.1

cpe:2.3:o:juniper:junos:12.1
Juniper » Junos » Version: 12.1r

cpe:2.3:o:juniper:junos:12.1r
Juniper » Junos » Version: 12.1x44

cpe:2.3:o:juniper:junos:12.1x44
Juniper » Junos » Version: 12.1x45

cpe:2.3:o:juniper:junos:12.1x45
Juniper » Junos » Version: 12.1x46

cpe:2.3:o:juniper:junos:12.1x46
Juniper » Junos » Version: 12.1x46-d10

cpe:2.3:o:juniper:junos:12.1x46-d10
Juniper » Junos » Version: 12.1x46-d76

cpe:2.3:o:juniper:junos:12.1x46-d76
Juniper » Junos » Version: 12.1x47

cpe:2.3:o:juniper:junos:12.1x47
Juniper » Junos » Version: 12.2

cpe:2.3:o:juniper:junos:12.2
Juniper » Junos » Version: 12.2x50

cpe:2.3:o:juniper:junos:12.2x50
Juniper » Junos » Version: 12.2x65

cpe:2.3:o:juniper:junos:12.2x65
Juniper » Junos » Version: 12.3

cpe:2.3:o:juniper:junos:12.3
Juniper » Junos » Version: 12.3r12

cpe:2.3:o:juniper:junos:12.3r12
Juniper » Junos » Version: 12.3x48

cpe:2.3:o:juniper:junos:12.3x48
Juniper » Junos » Version: 12.3x48-d70

cpe:2.3:o:juniper:junos:12.3x48-d70
Juniper » Junos » Version: 12.3x50

cpe:2.3:o:juniper:junos:12.3x50
Juniper » Junos » Version: 13.1

cpe:2.3:o:juniper:junos:13.1
Juniper » Junos » Version: 13.1x49

cpe:2.3:o:juniper:junos:13.1x49
Juniper » Junos » Version: 13.1x50

cpe:2.3:o:juniper:junos:13.1x50
Juniper » Junos » Version: 13.2

cpe:2.3:o:juniper:junos:13.2
Juniper » Junos » Version: 13.2x51

cpe:2.3:o:juniper:junos:13.2x51
Juniper » Junos » Version: 13.2x52

cpe:2.3:o:juniper:junos:13.2x52
Juniper » Junos » Version: 13.3

cpe:2.3:o:juniper:junos:13.3
Juniper » Junos » Version: 13.3r9

cpe:2.3:o:juniper:junos:13.3r9
Juniper » Junos » Version: 14.1

cpe:2.3:o:juniper:junos:14.1
Juniper » Junos » Version: 14.1r7

cpe:2.3:o:juniper:junos:14.1r7
Juniper » Junos » Version: 14.1x50

cpe:2.3:o:juniper:junos:14.1x50
Juniper » Junos » Version: 14.1x51

cpe:2.3:o:juniper:junos:14.1x51
Juniper » Junos » Version: 14.1x53

cpe:2.3:o:juniper:junos:14.1x53
Juniper » Junos » Version: 14.1x53-d10

cpe:2.3:o:juniper:junos:14.1x53-d10
Juniper » Junos » Version: 14.1x53-d15

cpe:2.3:o:juniper:junos:14.1x53-d15
Juniper » Junos » Version: 14.1x53-d25

cpe:2.3:o:juniper:junos:14.1x53-d25
Juniper » Junos » Version: 14.1x53-d26

cpe:2.3:o:juniper:junos:14.1x53-d26
Juniper » Junos » Version: 14.1x53-d27

cpe:2.3:o:juniper:junos:14.1x53-d27
Juniper » Junos » Version: 14.1x53-d30

cpe:2.3:o:juniper:junos:14.1x53-d30
Juniper » Junos » Version: 14.1x53-d35

cpe:2.3:o:juniper:junos:14.1x53-d35
Juniper » Junos » Version: 14.1x55

cpe:2.3:o:juniper:junos:14.1x55
Juniper » Junos » Version: 14.2

cpe:2.3:o:juniper:junos:14.2
Juniper » Junos » Version: 14.2r6

cpe:2.3:o:juniper:junos:14.2r6
Juniper » Junos » Version: 15.1

cpe:2.3:o:juniper:junos:15.1
Juniper » Junos » Version: 15.1f6-s1

cpe:2.3:o:juniper:junos:15.1f6-s1
Juniper » Junos » Version: 15.1f6-s10

cpe:2.3:o:juniper:junos:15.1f6-s10
Juniper » Junos » Version: 15.1f6-s11

cpe:2.3:o:juniper:junos:15.1f6-s11
Juniper » Junos » Version: 15.1f6-s2

cpe:2.3:o:juniper:junos:15.1f6-s2
Juniper » Junos » Version: 15.1f6-s4

cpe:2.3:o:juniper:junos:15.1f6-s4
Juniper » Junos » Version: 15.1f6-s5

cpe:2.3:o:juniper:junos:15.1f6-s5
Juniper » Junos » Version: 15.1f6-s6

cpe:2.3:o:juniper:junos:15.1f6-s6
Juniper » Junos » Version: 15.1f6-s7

cpe:2.3:o:juniper:junos:15.1f6-s7
Juniper » Junos » Version: 15.1f6-s8

cpe:2.3:o:juniper:junos:15.1f6-s8
Juniper » Junos » Version: 15.1f6-s9

cpe:2.3:o:juniper:junos:15.1f6-s9
Juniper » Junos » Version: 15.1r2

cpe:2.3:o:juniper:junos:15.1r2
Juniper » Junos » Version: 15.1r7-s3

cpe:2.3:o:juniper:junos:15.1r7-s3
Juniper » Junos » Version: 15.1x49

cpe:2.3:o:juniper:junos:15.1x49
Juniper » Junos » Version: 15.1x49-d140

cpe:2.3:o:juniper:junos:15.1x49-d140
Juniper » Junos » Version: 15.1x49-d150

cpe:2.3:o:juniper:junos:15.1x49-d150
Juniper » Junos » Version: 15.1x49-d160

cpe:2.3:o:juniper:junos:15.1x49-d160
Juniper » Junos » Version: 15.1x49-d30

cpe:2.3:o:juniper:junos:15.1x49-d30
Juniper » Junos » Version: 15.1x49-d60

cpe:2.3:o:juniper:junos:15.1x49-d60
Juniper » Junos » Version: 15.1x53

cpe:2.3:o:juniper:junos:15.1x53
Juniper » Junos » Version: 15.1x53-d235

cpe:2.3:o:juniper:junos:15.1x53-d235
Juniper » Junos » Version: 15.1x53-d495

cpe:2.3:o:juniper:junos:15.1x53-d495
Juniper » Junos » Version: 15.1x53-d50

cpe:2.3:o:juniper:junos:15.1x53-d50
Juniper » Junos » Version: 15.1x53-d51

cpe:2.3:o:juniper:junos:15.1x53-d51
Juniper » Junos » Version: 15.1x53-d52

cpe:2.3:o:juniper:junos:15.1x53-d52
Juniper » Junos » Version: 15.1x53-d55

cpe:2.3:o:juniper:junos:15.1x53-d55
Juniper » Junos » Version: 15.1x53-d57

cpe:2.3:o:juniper:junos:15.1x53-d57
Juniper » Junos » Version: 15.1x53-d58

cpe:2.3:o:juniper:junos:15.1x53-d58
Juniper » Junos » Version: 15.1x53-d59

cpe:2.3:o:juniper:junos:15.1x53-d59
Juniper » Junos » Version: 15.1x53-d591

cpe:2.3:o:juniper:junos:15.1x53-d591
Juniper » Junos » Version: 15.1x53-d69

cpe:2.3:o:juniper:junos:15.1x53-d69
Juniper » Junos » Version: 15.1x54

cpe:2.3:o:juniper:junos:15.1x54
Juniper » Junos » Version: 15.1x8

cpe:2.3:o:juniper:junos:15.1x8
Juniper » Junos » Version: 15.2

cpe:2.3:o:juniper:junos:15.2
Juniper » Junos » Version: 16

cpe:2.3:o:juniper:junos:16
Juniper » Junos » Version: 16.1

cpe:2.3:o:juniper:junos:16.1
Juniper » Junos » Version: 16.1r4-s12

cpe:2.3:o:juniper:junos:16.1r4-s12
Juniper » Junos » Version: 16.1r6-s6

cpe:2.3:o:juniper:junos:16.1r6-s6
Juniper » Junos » Version: 16.1r7-s3

cpe:2.3:o:juniper:junos:16.1r7-s3
Juniper » Junos » Version: 16.1x65

cpe:2.3:o:juniper:junos:16.1x65
Juniper » Junos » Version: 16.1x70

cpe:2.3:o:juniper:junos:16.1x70
Juniper » Junos » Version: 16.2

cpe:2.3:o:juniper:junos:16.2
Juniper » Junos » Version: 17.1

cpe:2.3:o:juniper:junos:17.1
Juniper » Junos » Version: 17.1r3

cpe:2.3:o:juniper:junos:17.1r3
Juniper » Junos » Version: 17.2

cpe:2.3:o:juniper:junos:17.2
Juniper » Junos » Version: 17.2r3

cpe:2.3:o:juniper:junos:17.2r3
Juniper » Junos » Version: 17.2x75

cpe:2.3:o:juniper:junos:17.2x75
Juniper » Junos » Version: 17.3

cpe:2.3:o:juniper:junos:17.3
Juniper » Junos » Version: 17.3r3

cpe:2.3:o:juniper:junos:17.3r3
Juniper » Junos » Version: 17.3r3-s2

cpe:2.3:o:juniper:junos:17.3r3-s2
Juniper » Junos » Version: 17.3r4

cpe:2.3:o:juniper:junos:17.3r4
Juniper » Junos » Version: 17.4

cpe:2.3:o:juniper:junos:17.4
Juniper » Junos » Version: 17.4r2

cpe:2.3:o:juniper:junos:17.4r2
Juniper » Junos » Version: 17.4r2-s1

cpe:2.3:o:juniper:junos:17.4r2-s1
Juniper » Junos » Version: 17.4r2-s2

cpe:2.3:o:juniper:junos:17.4r2-s2
Juniper » Junos » Version: 17.4r3

cpe:2.3:o:juniper:junos:17.4r3
Juniper » Junos » Version: 18

cpe:2.3:o:juniper:junos:18
Juniper » Junos » Version: 18.1

cpe:2.3:o:juniper:junos:18.1
Juniper » Junos » Version: 18.1r

cpe:2.3:o:juniper:junos:18.1r
Juniper » Junos » Version: 18.1r2

cpe:2.3:o:juniper:junos:18.1r2
Juniper » Junos » Version: 18.1r3-s1

cpe:2.3:o:juniper:junos:18.1r3-s1
Juniper » Junos » Version: 18.1r4

cpe:2.3:o:juniper:junos:18.1r4
Juniper » Junos » Version: 18.1x75

cpe:2.3:o:juniper:junos:18.1x75
Juniper » Junos » Version: 18.2

cpe:2.3:o:juniper:junos:18.2
Juniper » Junos » Version: 18.2r

cpe:2.3:o:juniper:junos:18.2r
Juniper » Junos » Version: 18.2r1

cpe:2.3:o:juniper:junos:18.2r1
Juniper » Junos » Version: 18.2r2

cpe:2.3:o:juniper:junos:18.2r2
Juniper » Junos » Version: 18.2x75

cpe:2.3:o:juniper:junos:18.2x75
Juniper » Junos » Version: 18.2x75-d10

cpe:2.3:o:juniper:junos:18.2x75-d10
Juniper » Junos » Version: 18.2x75-d30

cpe:2.3:o:juniper:junos:18.2x75-d30
Juniper » Junos » Version: 18.3

cpe:2.3:o:juniper:junos:18.3
Juniper » Junos » Version: 18.3r

cpe:2.3:o:juniper:junos:18.3r
Juniper » Junos » Version: 18.3r2

cpe:2.3:o:juniper:junos:18.3r2
Juniper » Junos » Version: 18.4

cpe:2.3:o:juniper:junos:18.4
Juniper » Junos » Version: 19.1

cpe:2.3:o:juniper:junos:19.1
Juniper » Junos » Version: 19.2

cpe:2.3:o:juniper:junos:19.2
Juniper » Junos » Version: 19.3

cpe:2.3:o:juniper:junos:19.3
Juniper » Junos » Version: 19.4

cpe:2.3:o:juniper:junos:19.4
Juniper » Junos » Version: 20.1

cpe:2.3:o:juniper:junos:20.1
Juniper » Junos » Version: 20.2

cpe:2.3:o:juniper:junos:20.2
Juniper » Junos » Version: 20.4

cpe:2.3:o:juniper:junos:20.4
Juniper » Junos » Version: 21.1

cpe:2.3:o:juniper:junos:21.1
Juniper » Junos » Version: 21.2

cpe:2.3:o:juniper:junos:21.2
Juniper » Junos » Version: 21.3

cpe:2.3:o:juniper:junos:21.3
Juniper » Junos » Version: 21.4

cpe:2.3:o:juniper:junos:21.4
Juniper » Junos » Version: 22.1

cpe:2.3:o:juniper:junos:22.1
Juniper » Junos » Version: 4.0

cpe:2.3:o:juniper:junos:4.0
Juniper » Junos » Version: 4.1

cpe:2.3:o:juniper:junos:4.1
Juniper » Junos » Version: 4.2

cpe:2.3:o:juniper:junos:4.2
Juniper » Junos » Version: 4.3

cpe:2.3:o:juniper:junos:4.3
Juniper » Junos » Version: 4.4

cpe:2.3:o:juniper:junos:4.4
Juniper » Junos » Version: 5.0

cpe:2.3:o:juniper:junos:5.0
Juniper » Junos » Version: 5.0r3

cpe:2.3:o:juniper:junos:5.0r3
Juniper » Junos » Version: 5.0r4

cpe:2.3:o:juniper:junos:5.0r4
Juniper » Junos » Version: 5.1

cpe:2.3:o:juniper:junos:5.1
Juniper » Junos » Version: 5.2

cpe:2.3:o:juniper:junos:5.2
Juniper » Junos » Version: 5.3

cpe:2.3:o:juniper:junos:5.3
Juniper » Junos » Version: 5.4

cpe:2.3:o:juniper:junos:5.4
Juniper » Junos » Version: 5.5

cpe:2.3:o:juniper:junos:5.5
Juniper » Junos » Version: 5.6

cpe:2.3:o:juniper:junos:5.6
Juniper » Junos » Version: 5.7

cpe:2.3:o:juniper:junos:5.7
Juniper » Junos » Version: 6.0

cpe:2.3:o:juniper:junos:6.0
Juniper » Junos » Version: 6.1

cpe:2.3:o:juniper:junos:6.1
Juniper » Junos » Version: 6.2

cpe:2.3:o:juniper:junos:6.2
Juniper » Junos » Version: 6.3

cpe:2.3:o:juniper:junos:6.3
Juniper » Junos » Version: 6.4

cpe:2.3:o:juniper:junos:6.4
Juniper » Junos » Version: 7.0

cpe:2.3:o:juniper:junos:7.0
Juniper » Junos » Version: 7.1

cpe:2.3:o:juniper:junos:7.1
Juniper » Junos » Version: 7.2

cpe:2.3:o:juniper:junos:7.2
Juniper » Junos » Version: 7.3

cpe:2.3:o:juniper:junos:7.3
Juniper » Junos » Version: 7.4

cpe:2.3:o:juniper:junos:7.4
Juniper » Junos » Version: 7.5

cpe:2.3:o:juniper:junos:7.5
Juniper » Junos » Version: 7.6

cpe:2.3:o:juniper:junos:7.6
Juniper » Junos » Version: 8.0

cpe:2.3:o:juniper:junos:8.0
Juniper » Junos » Version: 8.1

cpe:2.3:o:juniper:junos:8.1
Juniper » Junos » Version: 8.2

cpe:2.3:o:juniper:junos:8.2
Juniper » Junos » Version: 8.3

cpe:2.3:o:juniper:junos:8.3
Juniper » Junos » Version: 8.4

cpe:2.3:o:juniper:junos:8.4
Juniper » Junos » Version: 9.0

cpe:2.3:o:juniper:junos:9.0
Juniper » Junos » Version: 9.1

cpe:2.3:o:juniper:junos:9.1
Juniper » Junos » Version: 9.2

cpe:2.3:o:juniper:junos:9.2
Juniper » Junos » Version: 9.4

cpe:2.3:o:juniper:junos:9.4
Juniper » Junos » Version: 9.5

cpe:2.3:o:juniper:junos:9.5
Juniper » Junos » Version: 9.6

cpe:2.3:o:juniper:junos:9.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28961

Products

Pricing

Contact Us