Kestrel
대시보드로 돌아가기
CVE-2026-33794MEDIUM· 5.9MITRENVD대응게시일: 2026. 07. 09.수정일: 2026. 07. 13.CNA: sirt@juniper.netAnalyzed

An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networ

위협 신호 · CVSS · EPSS · KEV

정기 패치· 높은 악용 신호 없음
CVSS
5.9medium

이론적 심각도 점수

EPSS
0.2%상위 85.2%

30일 내 악용 확률 예측

KEV
미등재

실측 악용 기록 없음

권장 대응 기한60일 이내CISA SSVC 기준

계획된 패치 주기 내 조치(60일 이내)

외부 노출· KEV 미등재 · 자동화 어려움 · 부분 영향 · 외부 노출

CVSS 벡터 · 메트릭

악용 경로
공격 벡터네트워크
공격 복잡도높음
필요 권한불필요
사용자 상호작용불필요
범위불변
영향
기밀성 영향없음
무결성 영향없음
가용성 영향높음
버전별 점수
CVSS 4.08.2HIGH· 악용성숙도 NOT_DEFINED
CVSS 3.15.9MEDIUM· 악용성 2.2· 영향도 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

약점 (CWE)

상세 설명

An Improper Check for Unusual or Exceptional Conditions vulnerability in the

advanced forwarding toolkit (evo-aftmand)

of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated network-based attacker generating continuous routing updates, resulting in unilist ECMP routes, to crash the

evo-aftmand process on the PFE, leading to a Denial-of-Service (DoS). The conditions required for successful exploitation are based on a sequence of events that are outside an attacker's direct control.

Unified list (unilist) ECMP routes are a specific ECMP behavior where multiple equal-cost routes share a single logical next-hop list entry. The router treats them as one route with multiple next hops and load balances traffic across that unified list. Due to an issue processing unilist ECMP routing updates, internal state corruption may occur, especially in large-scale ECMP unilist deployments, leading to the evo-aftmand process crashing, resulting in an evo-aftmand-bx core. Manual intervention is required to recover by rebooting the system or restarting the FPC.

This issue affects Junos OS Evolved on PTX :

  • from 24.4R2-EVO before 24.4R2-S3-EVO;
  • from 25.2 before 25.2R2-EVO.

AI 심층 분석

공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.

영향받는 제품·버전

  • juniper junos_os_evolved
    other
  • juniper junos_os_evolved
    other
  • juniper junos_os_evolved
    other
  • juniper junos_os_evolved
    other
  • juniper junos_os_evolved
    other
  • juniper junos_os_evolved
    other
  • juniper junos_os_evolved
    other
  • juniper ptx1000-72q
    other
  • juniper ptx10000
    other
  • juniper ptx10001
    other
  • juniper ptx10001-36mr
    other
  • juniper ptx100016
    other
  • juniper ptx10002
    other
  • juniper ptx10002-36qdd
    other
  • juniper ptx10002-60c
    other
  • juniper ptx10003
    other
  • juniper ptx10003_160c
    other
  • juniper ptx10003_80c
    other
  • juniper ptx10003_81cd
    other
  • juniper ptx10004
    other
  • juniper ptx10008
    other
  • juniper ptx10016
    other
  • juniper ptx12008
    other
  • juniper ptx3000
    other
  • juniper ptx5000
    other

영향받는 구성 (CPE) 25

  • juniper junos_os_evolved 24.4cpe:2.3:o:juniper:junos_os_evolved:24.4:r2:*:*:*:*:*:*
  • juniper junos_os_evolved 24.4cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s1:*:*:*:*:*:*
  • juniper junos_os_evolved 24.4cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s2:*:*:*:*:*:*
  • juniper junos_os_evolved 25.2cpe:2.3:o:juniper:junos_os_evolved:25.2:-:*:*:*:*:*:*
  • juniper junos_os_evolved 25.2cpe:2.3:o:juniper:junos_os_evolved:25.2:r1:*:*:*:*:*:*
  • juniper junos_os_evolved 25.2cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s1:*:*:*:*:*:*
  • juniper junos_os_evolved 25.2cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s2:*:*:*:*:*:*
  • juniper ptx1000-72qcpe:2.3:h:juniper:ptx1000-72q:-:*:*:*:*:*:*:*
  • juniper ptx10000cpe:2.3:h:juniper:ptx10000:-:*:*:*:*:*:*:*
  • juniper ptx10001cpe:2.3:h:juniper:ptx10001:-:*:*:*:*:*:*:*
  • juniper ptx10001-36mrcpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:*
  • juniper ptx100016cpe:2.3:h:juniper:ptx100016:-:*:*:*:*:*:*:*
  • juniper ptx10002cpe:2.3:h:juniper:ptx10002:-:*:*:*:*:*:*:*
  • juniper ptx10002-36qddcpe:2.3:h:juniper:ptx10002-36qdd:-:*:*:*:*:*:*:*
  • juniper ptx10002-60ccpe:2.3:h:juniper:ptx10002-60c:-:*:*:*:*:*:*:*
  • juniper ptx10003cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*
  • juniper ptx10003_160ccpe:2.3:h:juniper:ptx10003_160c:-:*:*:*:*:*:*:*
  • juniper ptx10003_80ccpe:2.3:h:juniper:ptx10003_80c:-:*:*:*:*:*:*:*
  • juniper ptx10003_81cdcpe:2.3:h:juniper:ptx10003_81cd:-:*:*:*:*:*:*:*
  • juniper ptx10004cpe:2.3:h:juniper:ptx10004:-:*:*:*:*:*:*:*
  • juniper ptx10008cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:*
  • juniper ptx10016cpe:2.3:h:juniper:ptx10016:-:*:*:*:*:*:*:*
  • juniper ptx12008cpe:2.3:h:juniper:ptx12008:-:*:*:*:*:*:*:*
  • juniper ptx3000cpe:2.3:h:juniper:ptx3000:-:*:*:*:*:*:*:*
  • juniper ptx5000cpe:2.3:h:juniper:ptx5000:-:*:*:*:*:*:*:*

참고 자료 1

링크 내용 불러오는 중…