Description

An Incorrect Behavior Order in the routing engine (RE) of Juniper Networks Junos OS on EX4300 Series allows traffic intended to the device to reach the RE instead of being discarded when the discard term is set in loopback (lo0) interface. The intended function is that the lo0 firewall filter takes precedence over the revenue interface firewall filter.  This issue affects only IPv6 firewall filter. This issue only affects the EX4300 switch. No other products or platforms are affected by this vulnerability.  This issue affects Juniper Networks Junos OS: * All versions before 20.4R3-S10, * from 21.2 before 21.2R3-S7, * from 21.4 before 21.4R3-S6.

INFO

Published Date :

2024-04-12T15:02:47.783Z

Last Modified :

2024-08-02T01:32:07.297Z

Source :

juniper
AFFECTED PRODUCTS

The following products are affected by CVE-2024-30410 vulnerability.

Vendors Products
Juniper
  • Ex4300
  • Ex4300-24p
  • Ex4300-24p-s
  • Ex4300-24t
  • Ex4300-24t-s
  • Ex4300-32f
  • Ex4300-32f-dc
  • Ex4300-32f-s
  • Ex4300-48mp
  • Ex4300-48mp-s
  • Ex4300-48p
  • Ex4300-48p-s
  • Ex4300-48t
  • Ex4300-48t-afi
  • Ex4300-48t-dc
  • Ex4300-48t-dc-afi
  • Ex4300-48t-s
  • Junos
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-30410.

URL Resource
https://supportportal.juniper.net/JSA79100 cve-icon cve-icon cve-icon
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact