CVE-2022-22227

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated network-based attacker to cause a partial Denial of Service (DoS). On receipt of specific IPv6 transit traffic, Junos OS Evolved on ACX7100-48L, ACX7100-32C and ACX7509 sends this traffic to the Routing Engine (RE) instead of forwarding it, leading to increased CPU utilization of the RE and a partial DoS. This issue only affects systems configured with IPv6. This issue does not affect ACX7024 which is supported from 22.3R1-EVO onwards where the fix has already been incorporated as indicated in the solution section. This issue affects Juniper Networks Junos OS Evolved on ACX7100-48L, ACX7100-32C, ACX7509: 21.1-EVO versions prior to 21.1R3-S2-EVO; 21.2-EVO versions prior to 21.2R3-S2-EVO; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R1-S1-EVO, 21.4R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 21.1R1-EVO.

• CWE-754
• CWE-754

• https://kb.juniper.net/JSA69878Vendor Advisory
• https://kb.juniper.net/JSA69878Vendor Advisory

Published

Oct 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22220A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab…5.9
• CVE-2022-22221An Improper Neutralization of Special Elements vulnerability…7.8
• CVE-2022-22223On QFX10000 Series devices using Juniper Networks Junos OS w…7.5
• CVE-2022-22224An Improper Check or Handling of Exceptional Conditions vuln…6.5
• CVE-2022-22225A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab…5.9
• CVE-2022-22226In VxLAN scenarios on EX4300-MP, EX4600, QFX5000 Series devi…6.5
• CVE-2022-22228An Improper Validation of Specified Type of Input vulnerabil…7.5
• CVE-2022-22229An Improper Neutralization of Input During Web Page Generati…8.4
• CVE-2022-2223The WordPress plugin Image Slider is vulnerable to Cross-Sit…4.3
• CVE-2022-22230An Improper Input Validation vulnerability in the Routing Pr…6.5
• CVE-2022-22231An Unchecked Return Value to NULL Pointer Dereference vulner…7.5
• CVE-2022-22232A NULL Pointer Dereference vulnerability in the Packet Forwa…7.5