CVE-2024-47498: Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect
An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).
Several configuration statements meant to enforce limits on MAC learning and moves can be configured but do not take effect. This can lead to control plane overload situations which will severely impact the ability of the device to processes legitimate traffic.
This issue affects Junos OS Evolved on QFX5000 Series:
All versions before 21.4R3-S8-EVO, 22.2-EVO versions before 22.2R3-S5-EVO,
22.4-EVO versions before 22.4R3-EVO, 23.2-EVO versions before 23.2R2-EVO.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47498?
CVE-2024-47498 has been classified as a medium-severity vulnerability due to its potential for causing Denial-of-Service (DoS).
How do I fix CVE-2024-47498?
To fix CVE-2024-47498, update your Junos OS Evolved to a non-vulnerable version as specified in the vendor's security advisory.
What systems are affected by CVE-2024-47498?
CVE-2024-47498 affects Juniper Networks Junos OS Evolved on various versions of the QFX5000 Series.
Can CVE-2024-47498 be exploited remotely?
CVE-2024-47498 requires an adjacent attacker, making remote exploitation not possible without local access.
What type of attack does CVE-2024-47498 facilitate?
CVE-2024-47498 can be exploited to cause Denial-of-Service (DoS), disrupting normal operations of affected systems.