CVE-2026-103411: Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing

Published Oct 28, 2026

Updated

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply.

Affected Software

1 affected component

Juniper Networks Session Smart Router

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Networks Session Smart Router to a version that resolves this vulnerability.
Fixed in 7.0.5
Upgrade
Upgrade Juniper Networks Session Smart Router to a version that resolves this vulnerability.
Fixed in 7.1.7
Upgrade
Upgrade Juniper Networks Session Smart Router to a version that resolves this vulnerability.
Fixed in 7.2.3

Event History

Oct 28, 2026

CVE Published

via MITRE·04:37 PM

Data Sourced

via MITRE·04:37 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs local network access and must be able to provide a malicious DHCP reply. No privileges or user interaction are required.

What impact can successful exploitation have?

A malicious DHCP server can trigger information disclosure and cause a denial of service through DHCP option parsing.

Which component should be investigated when assessing exposure?

Assess systems running Juniper Networks Session Smart Router and focus on DHCP processing by the DhcpMessageDecoder component. Exposure depends on whether an attacker on the local network can supply DHCP replies.