CVE-2024-30390: Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced
An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited Denial of Service (DoS) to the management plane.
When an incoming connection was blocked because it exceeded the connections-per-second rate-limit, the system doesn't consider existing connections anymore for subsequent connection attempts so that the connection limit can be exceeded. This issue affects Junos OS Evolved:
All versions before 21.4R3-S4-EVO, 22.1-EVO versions before 22.1R3-S3-EVO, 22.2-EVO versions before 22.2R3-S2-EVO, 22.3-EVO versions before 22.3R2-S1-EVO, 22.3R3-EVO.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30390?
CVE-2024-30390 has a moderate severity rating as it allows limited Denial of Service (DoS) to the management plane.
How do I fix CVE-2024-30390?
To fix CVE-2024-30390, it is recommended to upgrade to the latest versions of Junos OS Evolved that are beyond 22.3R2-S1-EVO.
Who is affected by CVE-2024-30390?
CVE-2024-30390 affects users of Juniper Networks Junos OS Evolved versions up to 21.4R3-S4-EVO, 22.1R3-S3-EVO, 22.2R3-S2-EVO, and 22.3R2-S1-EVO.
What type of attack does CVE-2024-30390 facilitate?
CVE-2024-30390 facilitates a network-based Denial of Service (DoS) attack due to improper restrictions on excessive authentication attempts.
Is CVE-2024-30390 remotely exploitable?
Yes, CVE-2024-30390 can be exploited by unauthenticated attackers remotely over the network.