CVE-2022-22216

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks Junos OS on PTX Series and QFX10k Series allows an adjacent unauthenticated attacker to gain access to sensitive information. PTX1000 and PTX10000 Series, and QFX10000 Series and PTX5000 Series devices sometimes do not reliably pad Ethernet packets, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak' and often detected as CVE-2003-0001. This issue affects: Juniper Networks Junos OS on PTX1000 and PTX10000 Series: All versions prior to 18.4R3-S11; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. Juniper Networks Junos OS on QFX10000 Series and PTX5000 Series: All versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2.

• CWE-200

• https://kb.juniper.net/JSA69720Vendor Advisory
• https://kb.juniper.net/JSA69720Vendor Advisory

Published

Jul 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22210A NULL Pointer Dereference vulnerability in the Packet Forwa…6.5
• CVE-2022-22211A limitless resource allocation vulnerability in FPC resourc…7.5
• CVE-2022-22212An Allocation of Resources Without Limits or Throttling vuln…7.5
• CVE-2022-22213A vulnerability in Handling of Undefined Values in the routi…5.9
• CVE-2022-22214An Improper Input Validation vulnerability in the Packet For…6.5
• CVE-2022-22215A Missing Release of File Descriptor or Handle after Effecti…5.5
• CVE-2022-22217An Improper Check for Unusual or Exceptional Conditions vuln…6.5
• CVE-2022-22218On SRX Series devices, an Improper Check for Unusual or Exce…7.5
• CVE-2022-22219Due to the Improper Handling of an Unexpected Data Type in t…5.9
• CVE-2022-2222The Download Monitor WordPress plugin before 4.5.91 does not…4.9
• CVE-2022-22220A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab…5.9
• CVE-2022-22221An Improper Neutralization of Special Elements vulnerability…7.8