CVE-2022-22202

An Improper Handling of Exceptional Conditions vulnerability on specific PTX Series devices, including the PTX1000, PTX3000 (NextGen), PTX5000, PTX10002-60C, PTX10008, and PTX10016 Series, in Juniper Networks Junos OS allows an unauthenticated MPLS-based attacker to cause a Denial of Service (DoS) by triggering the dcpfe process to crash and FPC to restart. On affected PTX Series devices, processing specific MPLS packets received on an interface with multiple units configured may cause FPC to restart unexpectedly. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects PTX Series devices utilizing specific FPCs found on PTX1000, PTX3000 (NextGen), PTX5000, PTX10002-60C, PTX10008, and PTX10016 Series devices, only if multiple units are configured on the ingress interface, and at least one unit has 'family mpls' *not* configured. See the configuration sample below for more information. No other platforms are affected by this vulnerability. This issue affects: Juniper Networks Junos OS on PTX Series: All versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R3-S8; 20.1 versions prior to 20.1R3-S4; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S4; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S2; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R2.

• CWE-755

• https://kb.juniper.net/JSA69706Exploit, Mitigation, Vendor Advisory
• https://kb.juniper.net/JSA69706Exploit, Mitigation, Vendor Advisory

Published

Jul 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22197An Operation on a Resource after Expiration or Release vulne…7.5
• CVE-2022-22198An Access of Uninitialized Pointer vulnerability in the SIP …7.5
• CVE-2022-22199Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-2220Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-22200Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-22201An Improper Validation of Specified Index, Position, or Offs…7.5
• CVE-2022-22203An Incorrect Comparison vulnerability in PFE of Juniper Netw…6.5
• CVE-2022-22204An Improper Release of Memory Before Removing Last Reference…5.3
• CVE-2022-22205A Missing Release of Memory after Effective Lifetime vulnera…7.5
• CVE-2022-22206A Buffer Overflow vulnerability in the PFE of Juniper Networ…7.5
• CVE-2022-22207A Use After Free vulnerability in the Advanced Forwarding To…7.5
• CVE-2022-22208A Use After Free vulnerability in the Routing Protocol Daemo…5.9