CVE-2023-44189 — CVE & Security Advisory Radar

🎯 CVE-2023-44189 MEDIUM 6.1 🔥 EPSS 18% 🇪🇺 EUVD

📄 .md Alle CVEs anzeigen ✕

CVE-2023-44189 | An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to this issue, the router will start forwarding traffic if a valid route is present in forwarding-table, causing a loop and congestion in the downstream layer-2 domain co

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to this issue, the router will start forwarding traffic if a valid route is present in forwarding-table, causing a loop and congestion in the downstream layer-2 domain connected to the device.

This issue affects Juniper Networks Junos OS Evolved on PTX10003 Series:

* All versions prior to 21.4R3-S4-EVO;
* 22.1 versions prior to 22.1R3-S3-EVO;
* 22.2 version 22.2R1-EVO and later versions;
* 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;
* 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;
* 23.2 versions prior to 23.2R2-EVO.

Klassifikation & Betroffenheit:

Juniper Networks Junos OS Evolved 22.2R1-EVO <22.2*-EVOJunos OS Evolved 0 <21.4R3-S4-EVOJunos OS Evolved 22.4 <22.4R2-S1-EVO, 22.4R3-EVOJunos OS Evolved 22.1 <22.1R3-S3-EVOJunos OS Evolved 22.3 <22.3R2-S2-EVO, 22.3R3-S1-EVOJunos OS Evolved 23.2 <23.2R2-EVOjuniper junos_os_evolved *juniper junos_os_evolved 21.4

Improper Control of Generation of Code ('Code Injection') 🎯 Medium

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

🛡️ Empfohlene Mitigation: Refactor your program so that you do not have to dynamically generate code.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-35 · Leverage Executable Code in Non-Executab… (Very High) CAPEC-77 · Manipulating User-Controlled Variables (Very High) CAPEC-242 · Code Injection (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1027.006 · Obfuscated Files or Information: H… T1027.009 · Obfuscated Files or Information: E… T1564.009 · Hide Artifacts: Resource Forking

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-21908 7.5 CVE-2024-21586 7.5 CVE-2024-21616 7.5 CVE-2024-21614 7.5 CVE-2024-21612 7.5

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

🔗 supportportal.juniper.net/JSA73153

Ausnutzungs-Zeitleiste:

Reserviert 2023

Veröffentlicht 10/2023

Heute 14.09.

CVSS-Vektor-Analyse: 6.1

AV · Angriffsvektor Benachbart

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Verändert

C · Vertraulichkeit Keine

I · Integrität Gering

A · Verfügbarkeit Gering

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

Veröffentlicht:11.10.2023

Aktualisiert:17.06.2026 06:27

Assigner (CNA):juniper

EUVD-ID:EUVD-2023-48548

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	2026-08-29	2026-09-13
≥90 %	4	0
≥50 %	4	0
≥10 %	3	0
<10 %	304	300

6.1 MEDIUM

🇪🇺 EUVD

EPSS

18%

CVE-2023-44189 🌐 Adjacent Network 🔓 Keine Authentifizierung nötig

Juniper Networks

CVE-2023-44189 | An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to this issue, the router will start forwarding traffic if a valid route is present in forwarding-table, causing a loop and congestion in the downstream layer-2 domain co

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

11.10.2023

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub