What’s Vulnerable › Vulnerabilities
CVE-2024-47498: Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-10-11 · updated 2026-06-17
Description
An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Several configuration statements meant to enforce limits on MAC learning and moves can be configured but do not take effect. This can lead to control plane overload situations which will severely impact the ability of the device to processes legitimate traffic. This issue affects Junos OS Evolved on QFX5000 Series: * All versions before 21.4R3-S8-EVO, * 22.2-EVO versions before 22.2R3-S5-EVO, * 22.4-EVO versions before 22.4R3-EVO, * 23.2-EVO versions before 23.2R2-EVO.
Affected products
- Juniper Networks Junos OS Evolved: before 21.4; 21.4, 21.4-r1, 21.4-r1-s1, 21.4-r1-s2, 21.4-r2, 21.4-r2-s1 (+32) — fixed in 21.4
How to fix
Upgrade to a fixed version: Juniper Networks Junos OS Evolved 21.4. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-47498 or the next vulnerability affects your stack