CVE-2026-57031

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-57031", "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "state": "PUBLISHED", "assignerShortName": "juniper", "dateReserved": "2026-06-23T16:27:00.249Z", "datePublished": "2026-07-09T21:13:46.497Z", "dateUpdated": "2026-07-10T14:37:16.783Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["MPC10", "MPC11", "LC4800", "LC9600", "MX304-LMIC16"], "platforms": ["MX Series"], "product": "Junos OS", "vendor": "Juniper Networks", "versions": [{"lessThan": "23.2R2-S7", "status": "affected", "version": "23.2R2-S1", "versionType": "custom"}, {"lessThan": "23.4R2-S7", "status": "affected", "version": "23.4R2", "versionType": "custom"}, {"lessThan": "24.2R2-S3", "status": "affected", "version": "24.2", "versionType": "custom"}, {"lessThan": "24.4R2-S2", "status": "affected", "version": "24.4", "versionType": "custom"}, {"lessThan": "25.2R2", "status": "affected", "version": "25.2", "versionType": "custom"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "To be exposed to this issue a configuration for static subscribers with an input filter is required:<br><br>\n\n<tt>[ system services&nbsp;static-subscribers ]<br><br></tt><tt>[ dynamic-profiles &lt;profile-name&gt; interfaces &lt;interface&gt; unit &lt;unit&gt; family (inet|inet6) filter input &lt;filter-name&gt; ]</tt>"}], "value": "To be exposed to this issue a configuration for static subscribers with an input filter is required:\n\n\n\n[ system services\u00a0static-subscribers ]\n\n[ dynamic-profiles <profile-name> interfaces <interface> unit <unit> family (inet|inet6) filter input <filter-name> ]"}], "datePublic": "2026-07-08T16:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters.<br><br><p>On MX Series devices with&nbsp;MPC10/11, LC4800/9600, and MX304 with&nbsp;subscribers configured on static interfaces, ingress firewall filters are not enforced, so that neither protocol level nor upstream bandwidth limitation are in effect.&nbsp;</p><p><br>This issue affects Junos OS on MX with&nbsp;MPC10/11, LC4800/9600/4802, and MX304:<br></p><ul><li>23.2 versions from 23.2R2-S1 before 23.2R2-S7,</li><li>23.4 versions from 23.4R2 before 23.4R2-S7,</li><li>24.2 versions before 24.2R2-S3,</li><li>24.4 versions before 24.4R2-S2,</li><li>25.2 versions before 25.2R2.</li></ul><br><p></p>"}], "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters.\n\nOn MX Series devices with\u00a0MPC10/11, LC4800/9600, and MX304 with\u00a0subscribers configured on static interfaces, ingress firewall filters are not enforced, so that neither protocol level nor upstream bandwidth limitation are in effect.\u00a0\n\n\nThis issue affects Junos OS on MX with\u00a0MPC10/11, LC4800/9600/4802, and MX304:\n\n\n * 23.2 versions from 23.2R2-S1 before 23.2R2-S7,\n * 23.4 versions from 23.4R2 before 23.4R2-S7,\n * 24.2 versions before 24.2R2-S3,\n * 24.4 versions before 24.4R2-S2,\n * 25.2 versions before 25.2R2."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"cvssV4_0": {"Automatable": "YES", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 5.3, "baseSeverity": "MEDIUM", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/AU:Y/RE:M", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "MODERATE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-754", "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper", "dateUpdated": "2026-07-09T21:13:46.497Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://supportportal.juniper.net/JSA110091"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The following software releases have been updated to resolve this specific issue:\n\nJunos OS: 23.2R2-S7, 23.4R2-S7, 24.2R2-S3, 24.4R2-S2, 25.2R2, 25.4R1, and all subsequent releases."}], "value": "The following software releases have been updated to resolve this specific issue:\n\nJunos OS: 23.2R2-S7, 23.4R2-S7, 24.2R2-S3, 24.4R2-S2, 25.2R2, 25.4R1, and all subsequent releases."}], "source": {"advisory": "JSA110091", "defect": ["1902909"], "discovery": "USER"}, "title": "Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "There are no known workarounds for this issue."}], "value": "There are no known workarounds for this issue."}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-10T14:35:02.980850Z", "id": "CVE-2026-57031", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-10T14:37:16.783Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-57031", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-10T14:35:02.980850Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-10T14:36:34.009Z"}}], "cna": {"title": "Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect", "source": {"defect": ["1902909"], "advisory": "JSA110091", "discovery": "USER"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.3, "Automatable": "YES", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/AU:Y/RE:M", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Juniper Networks", "modules": ["MPC10", "MPC11", "LC4800", "LC9600", "MX304-LMIC16"], "product": "Junos OS", "versions": [{"status": "affected", "version": "23.2R2-S1", "lessThan": "23.2R2-S7", "versionType": "custom"}, {"status": "affected", "version": "23.4R2", "lessThan": "23.4R2-S7", "versionType": "custom"}, {"status": "affected", "version": "24.2", "lessThan": "24.2R2-S3", "versionType": "custom"}, {"status": "affected", "version": "24.4", "lessThan": "24.4R2-S2", "versionType": "custom"}, {"status": "affected", "version": "25.2", "lessThan": "25.2R2", "versionType": "custom"}], "platforms": ["MX Series"], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.", "supportingMedia": [{"type": "text/html", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.", "base64": false}]}], "solutions": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue:\n\nJunos OS: 23.2R2-S7, 23.4R2-S7, 24.2R2-S3, 24.4R2-S2, 25.2R2, 25.4R1, and all subsequent releases.", "supportingMedia": [{"type": "text/html", "value": "The following software releases have been updated to resolve this specific issue:\n\nJunos OS: 23.2R2-S7, 23.4R2-S7, 24.2R2-S3, 24.4R2-S2, 25.2R2, 25.4R1, and all subsequent releases.", "base64": false}]}], "datePublic": "2026-07-08T16:00:00.000Z", "references": [{"url": "https://supportportal.juniper.net/JSA110091", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "There are no known workarounds for this issue.", "supportingMedia": [{"type": "text/html", "value": "There are no known workarounds for this issue.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters.\n\nOn MX Series devices with\u00a0MPC10/11, LC4800/9600, and MX304 with\u00a0subscribers configured on static interfaces, ingress firewall filters are not enforced, so that neither protocol level nor upstream bandwidth limitation are in effect.\u00a0\n\n\nThis issue affects Junos OS on MX with\u00a0MPC10/11, LC4800/9600/4802, and MX304:\n\n\n * 23.2 versions from 23.2R2-S1 before 23.2R2-S7,\n * 23.4 versions from 23.4R2 before 23.4R2-S7,\n * 24.2 versions before 24.2R2-S3,\n * 24.4 versions before 24.4R2-S2,\n * 25.2 versions before 25.2R2.", "supportingMedia": [{"type": "text/html", "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters.<br><br><p>On MX Series devices with&nbsp;MPC10/11, LC4800/9600, and MX304 with&nbsp;subscribers configured on static interfaces, ingress firewall filters are not enforced, so that neither protocol level nor upstream bandwidth limitation are in effect.&nbsp;</p><p><br>This issue affects Junos OS on MX with&nbsp;MPC10/11, LC4800/9600/4802, and MX304:<br></p><ul><li>23.2 versions from 23.2R2-S1 before 23.2R2-S7,</li><li>23.4 versions from 23.4R2 before 23.4R2-S7,</li><li>24.2 versions before 24.2R2-S3,</li><li>24.4 versions before 24.4R2-S2,</li><li>25.2 versions before 25.2R2.</li></ul><br><p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-754", "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions"}]}], "configurations": [{"lang": "en", "value": "To be exposed to this issue a configuration for static subscribers with an input filter is required:\n\n\n\n[ system services\u00a0static-subscribers ]\n\n[ dynamic-profiles <profile-name> interfaces <interface> unit <unit> family (inet|inet6) filter input <filter-name> ]", "supportingMedia": [{"type": "text/html", "value": "To be exposed to this issue a configuration for static subscribers with an input filter is required:<br><br>\n\n<tt>[ system services&nbsp;static-subscribers ]<br><br></tt><tt>[ dynamic-profiles &lt;profile-name&gt; interfaces &lt;interface&gt; unit &lt;unit&gt; family (inet|inet6) filter input &lt;filter-name&gt; ]</tt>", "base64": false}]}], "providerMetadata": {"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper", "dateUpdated": "2026-07-09T21:13:46.497Z"}}}, "cveMetadata": {"cveId": "CVE-2026-57031", "state": "PUBLISHED", "dateUpdated": "2026-07-10T14:37:16.783Z", "dateReserved": "2026-06-23T16:27:00.249Z", "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "datePublished": "2026-07-09T21:13:46.497Z", "assignerShortName": "juniper"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["MPC10", "MPC11", "LC4800", "LC9600", "MX304-LMIC16"], "platforms": ["MX Series"], "product": "Junos OS", "vendor": "Juniper Networks", "versions": [{"lessThan": "23.2R2-S7", "status": "affected", "version": "23.2R2-S1", "versionType": "custom"}, {"lessThan": "23.4R2-S7", "status": "affected", "version": "23.4R2", "versionType": "custom"}, {"lessThan": "24.2R2-S3", "status": "affected", "version": "24.2", "versionType": "custom"}, {"lessThan": "24.4R2-S2", "status": "affected", "version": "24.4", "versionType": "custom"}, {"lessThan": "25.2R2", "status": "affected", "version": "25.2", "versionType": "custom"}]}], "source": "sirt@juniper.net"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "A6FB32DF-D062-4FB9-8777-452978BEC7B7", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "B3B6C811-5C10-4486-849D-5559B592350A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*", "matchCriteriaId": "078D61B9-A228-453C-9D20-6F9C6B20637F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*", "matchCriteriaId": "F1F136A0-021D-43FE-BDD3-AD7201F7FC03", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s5:*:*:*:*:*:*", "matchCriteriaId": "37147BC9-9ED8-48AE-906A-614AD8600962", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.2:r2-s6:*:*:*:*:*:*", "matchCriteriaId": "7897729C-4128-49E9-B4A1-25353BC4DBB2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*", "matchCriteriaId": "175CCB13-76C0-44A4-A71D-41E22B92EB23", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "166BFDB3-1945-4949-BC2B-E18442FF2E4D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "5923610F-878C-48CA-8B5D-9C609E4DD4DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*", "matchCriteriaId": "A7C207E3-0252-4192-8E8C-E2ED2831B4F4", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*", "matchCriteriaId": "E6974492-FE69-4340-8881-61C3329C1545", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s5:*:*:*:*:*:*", "matchCriteriaId": "279E59FE-96DF-4E1D-A3A2-61D180F04533", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:23.4:r2-s6:*:*:*:*:*:*", "matchCriteriaId": "4D9A36E5-A1BB-46E1-91B6-91A4C40C1B59", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*", "matchCriteriaId": "89524D6D-0B22-4952-AD8E-8072C5A05D5C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*", "matchCriteriaId": "AD69A194-1B03-44EA-8092-79BD10C6F729", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "8463ADB4-B8A7-4D63-97A9-232ED713A21C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "FE68337F-106E-4317-A5B6-292B0159F577", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*", "matchCriteriaId": "266B520A-482A-43F7-90F8-B9D64D30034F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "AC78BC9E-5DA7-4E42-9923-B49A0B7F3564", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "DD99F1B0-82B0-4CD3-8C8F-C0FFF44A8B90", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*", "matchCriteriaId": "C452BDCB-34E3-42D3-8909-2312356EB70A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*", "matchCriteriaId": "2B8158F2-2028-40E9-955F-CFD581A32F60", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "1A7233A1-EC7A-4458-9AE1-835480A03A21", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*", "matchCriteriaId": "D74087E2-5CAA-4085-8408-EB70EC1D5D91", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*", "matchCriteriaId": "0EEF1798-F3C2-4645-96E7-1E82368B184D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:24.4:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "C8BB5EE1-04C7-4DF3-807A-06005ECFEEE5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*", "matchCriteriaId": "1B7572BB-9C77-4214-9C5F-CC83C7B93E37", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*", "matchCriteriaId": "CAADBF98-38BE-40E2-AF1B-9077DCED0809", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:25.2:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "558F0A4C-0C72-4BF1-B2DE-C0D3BFD54BCD", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:25.2:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "127FE528-AB27-4B18-AF3B-1BE7C0AEEE20", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:lc4800:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9C1C794-916A-401E-B430-D91E523B900D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc4802:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F12AF36-BDBE-4E8A-B6A1-B2E15CE5AA50", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:lc9600:-:*:*:*:*:*:*:*", "matchCriteriaId": "78296CAF-F1E3-4A3D-AEE1-C7E0BD2C18A4", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mpc10e-10c:-:*:*:*:*:*:*:*", "matchCriteriaId": "A7B2B400-31BD-422C-9C7D-6F9CA94BA59D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mpc10e-15c:-:*:*:*:*:*:*:*", "matchCriteriaId": "75DDC822-3BCC-44CF-9230-5D5EA09E4C09", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mpc11:-:*:*:*:*:*:*:*", "matchCriteriaId": "349364B1-359A-4D53-87D6-C440BC1D95E1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx304:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F7FB0CC-624D-4AB9-A7AC-BB19838C3B22", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters.\n\nOn MX Series devices with\u00a0MPC10/11, LC4800/9600, and MX304 with\u00a0subscribers configured on static interfaces, ingress firewall filters are not enforced, so that neither protocol level nor upstream bandwidth limitation are in effect.\u00a0\n\n\nThis issue affects Junos OS on MX with\u00a0MPC10/11, LC4800/9600/4802, and MX304:\n\n\n * 23.2 versions from 23.2R2-S1 before 23.2R2-S7,\n * 23.4 versions from 23.4R2 before 23.4R2-S7,\n * 24.2 versions before 24.2R2-S3,\n * 24.4 versions before 24.4R2-S2,\n * 25.2 versions before 25.2R2."}, {"lang": "es", "value": "Una vulnerabilidad de Comprobaci\u00f3n Incorrecta de Condiciones Inusuales o Excepcionales en el motor de reenv\u00edo de paquetes (PFE) de Juniper Networks Junos OS en la serie MX permite a los suscriptores adyacentes eludir los filtros de cortafuegos configurados.\n\nEn dispositivos de la serie MX con MPC10/11, LC4800/9600 y MX304 con suscriptores configurados en interfaces est\u00e1ticas, los filtros de cortafuegos de entrada no se aplican, de modo que ni el nivel de protocolo ni la limitaci\u00f3n de ancho de banda ascendente est\u00e1n en vigor.\n\nEste problema afecta a Junos OS en MX con MPC10/11, LC4800/9600/4802 y MX304:\n\n * Versiones 23.2 desde 23.2R2-S1 anteriores a 23.2R2-S7,\n * Versiones 23.4 desde 23.4R2 anteriores a 23.4R2-S7,\n * Versiones 24.2 anteriores a 24.2R2-S3,\n * Versiones 24.4 anteriores a 24.4R2-S2,\n * Versiones 25.2 anteriores a 25.2R2."}], "id": "CVE-2026-57031", "lastModified": "2026-10-25T15:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "sirt@juniper.net", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "YES", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "MODERATE"}, "source": "sirt@juniper.net", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-57031", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-10T14:35:02.980850Z", "version": "2.0.3"}}]}, "published": "2026-07-09T22:17:08.827", "references": [{"source": "sirt@juniper.net", "tags": ["Vendor Advisory"], "url": "https://supportportal.juniper.net/JSA110091"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-754"}], "source": "sirt@juniper.net", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["mx_series"], "status": "affected", "versions": {"scheme": "generic", "value": "[23.2R2-S1,23.2R2-S7)"}}, {"platform": ["mx_series"], "status": "affected", "versions": {"scheme": "generic", "value": "[23.4R2,23.4R2-S7)"}}, {"platform": ["mx_series"], "status": "affected", "versions": {"scheme": "generic", "value": "[24.2,24.2R2-S3)"}}, {"platform": ["mx_series"], "status": "affected", "versions": {"scheme": "generic", "value": "[24.4,24.4R2-S2)"}}, {"platform": ["mx_series"], "status": "affected", "versions": {"scheme": "generic", "value": "[25.2,25.2R2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Junos OS", "source": "cna", "vendor": "Juniper Networks"}, "product": "junos_os", "vendor": "juniper_networks"}], "created": "2026-07-09T22:45:03.815425+00:00", "updated": "2026-08-03T04:30:18.193850+00:00", "vendors": ["juniper_networks", "juniper_networks$PRODUCT$junos_os"]}