CVE-2024-47496

MEDIUM
Published Oct 11, 2024 Modified Jan 26, 2026 CWE-476

Description

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service (DoS). When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the system self-recovers. Repeated execution will create a sustained DoS condition. This issue only affects MX Series devices with Line cards MPC1-MPC9. This issue affects: Junos OS on MX Series: * All versions before 21.4R3-S9, * from 22.2 before 22.2R3-S5,  * from 22.3 before 22.3R3-S4, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2-S1, * from 23.4 before 23.4R2.

Is your site exposed to CVE-2024-47496?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-476 CWE-476

Affected Products

Vendor Product
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper 2x100ge_\+_4x10ge_mpc5e
juniper 2x100ge_\+_4x10ge_mpc5eq
juniper 2x100ge_\+_8x10ge_mpc4e
juniper 32x10ge_mpc4e
juniper 6x40ge_\+_24x10ge_mpc5e
juniper 6x40ge_\+_24x10ge_mpc5eq
juniper mpc1
juniper mpc1_q
juniper mpc1e
juniper mpc1e_q
juniper mpc2
juniper mpc2_eq
juniper mpc2_q
juniper mpc2e
juniper mpc2e_eq
juniper mpc2e_ng
juniper mpc2e_ng_q
juniper mpc2e_p
juniper mpc2e_q
juniper mpc3e
juniper mpc3e-3d-ng
juniper mpc3e-3d-ng-q
juniper mpc6e
juniper mpc7e-10g
juniper mpc7e-mrate
juniper mpc8e
juniper mpc9e
juniper mx2008
juniper mx2010
juniper mx240
juniper mx480
juniper mx960

References

Frequently Asked Questions

What is CVE-2024-47496? +
A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service (DoS). When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the system self-recovers. Repeated execution will create a sustained DoS condition. This issue only affects MX Series devices with Line cards MPC1-MPC9. This issue affects: Junos OS on MX Series: * All versions before 21.4R3-S9, * from 22.2 before 22.2R3-S5,  * from 22.3 before 22.3R3-S4, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2-S1, * from 23.4 before 23.4R2. It has a CVSS v3.1 base score of 5.5 (MEDIUM).
How severe is CVE-2024-47496? +
CVE-2024-47496 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-47496? +
CVE-2024-47496 affects products from juniper, specifically: 2x100ge_\+_4x10ge_mpc5e, 2x100ge_\+_4x10ge_mpc5eq, 2x100ge_\+_8x10ge_mpc4e, 32x10ge_mpc4e, 6x40ge_\+_24x10ge_mpc5e, 6x40ge_\+_24x10ge_mpc5eq, junos, mpc1, mpc1_q, mpc1e, mpc1e_q, mpc2, mpc2_eq, mpc2_q, mpc2e, mpc2e_eq, mpc2e_ng, mpc2e_ng_q, mpc2e_p, mpc2e_q, mpc3e, mpc3e-3d-ng, mpc3e-3d-ng-q, mpc6e, mpc7e-10g, mpc7e-mrate, mpc8e, mpc9e, mx2008, mx2010, mx240, mx480, mx960. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-47496? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-47496 — free, no signup required.