CVE-2026-102182
CVE-2026-102182 · Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue requires IKE to be enabled with an RSA-signature IKE policy to be vulnerable. This issue affects Junos OS on MX Series: * All versions before 21.2R3-S11; * from 21.4 before 21.4R3-S12; * from 22.2 before 22.2R3-S8; * from 22.3 before 22.3R3-S5; * from 22.4 before 22.4R3-S9;
CVSS 9.3 · Kritisch · EPSS 0,4% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Betroffene Produkte und Versionen
junos os
- Softwareversionen
- ≥ 0, < 23.2R2-S7.7: Betroffen (custom)
- ≥ 23.4, < 23.4R2-S8.13: Betroffen (custom)
- ≥ 24.2, < 24.2R2-S5.5: Betroffen (custom)
- ≥ 24.4, < 24.4R2-S5: Betroffen (custom)
- ≥ 25.2, < 25.2R2-S2: Betroffen (custom)
- ≥ 25.4, < 25.4R1-S3: Betroffen (custom)
- ≥ 26.2, < 26.2R1-S2: Betroffen (custom)
Auf 23.2R2-S7.7 aktualisieren