CVE-2026-103393
CVE-2026-103393 · Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a system fault via a specially crafted VRRPv3 advertisement.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
session smart router
- Versions
- ≥ 0, < 7.0.5: Affected (custom)
- ≥ 7.1.0, < 7.1.7: Affected (custom)
- ≥ 7.2.0, < 7.2.3: Affected (custom)
Update to 7.0.5; Update to 7.1.7; Update to 7.2.3