CVE-2024-30403

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). When Layer 2 traffic is sent through a logical interface, MAC learning happens. If during this process, the interface flaps, an Advanced Forwarding Toolkit manager (evo-aftmand-bt) core is observed. This leads to a PFE restart. The crash reoccurs if the same sequence of events happens, which will lead to a sustained DoS condition. This issue affects Juniper Networks Junos OS Evolved 23.2-EVO versions earlier than 23.2R1-S1-EVO, 23.2R2-EVO.

• CWE-476
• CWE-476

• https://supportportal.juniper.net/JSA79181Vendor Advisory
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LIssue Tracking
• https://supportportal.juniper.net/JSA79181Vendor Advisory
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LIssue Tracking

Published

Apr 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30395An Improper Validation of Specified Type of Input vulnerabil…8.7
• CVE-2024-30397An Improper Check for Unusual or Exceptional Conditions vuln…8.7
• CVE-2024-30398An Improper Restriction of Operations within the Bounds of a…8.7
• CVE-2024-3040A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-30401An Out-of-bounds Read vulnerability in the advanced forwardi…8.2
• CVE-2024-30402An Improper Check for Unusual or Exceptional Conditions vuln…5.3
• CVE-2024-30405An Incorrect Calculation of Buffer Size vulnerability in Jun…8.7
• CVE-2024-30406A Cleartext Storage in a File on Disk vulnerability in Junip…6.7
• CVE-2024-30407The Use of a Hard-coded Cryptographic Key vulnerability in J…9.2
• CVE-2024-30409An Improper Check for Unusual or Exceptional Conditions vuln…6.9
• CVE-2024-3041A vulnerability has been found in Netentsec NS-ASG Applicati…9.8
• CVE-2024-30410An Incorrect Behavior Order in the routing engine (RE) of Ju…6.9