CVE-2022-22203

Junos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot

MEDIUM

6.5

CVSS Score

Published: July 20, 2022 at 02:11 PM UTC

Updated: June 17, 2026 at 04:27 AM UTC

11 products affected across 2 vendorsJunosQfx5200Qfx5110

Using Junos OS by Juniper Networks?

Get instant alerts when new vulnerabilities affect Junos OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 1%

Description

An Incorrect Comparison vulnerability in PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). On QFX5000 Series, and EX4600 and EX4650 platforms, the fxpc process will crash followed by the FPC reboot upon receipt of a specific hostbound packet. Continued receipt of these specific packets will create a sustained Denial of Service (DoS) condition. This issue only affects Juniper Networks Junos OS 19.4 version 19.4R3-S4.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Junos · Juniper Networks

95%

19.4 ≤ v < 19.4R3-S519.4 19.4 r3-s4

Vendor states this is fixed in 19.4R3-S4 (unaffected)

Affected range stops below 19.4R3-S5, so it looks safe — our inference, not a vendor statement

juniper-ex4600 (environment) · juniper-ex4650 (environment) · juniper-qfx5100 (environment) · juniper-qfx5110 (environment) · juniper-qfx5120 (environment) · juniper-qfx5130 (environment) · juniper-qfx5200 (environment) · juniper-qfx5210 (environment) · juniper-qfx5220 (environment) · juniper-qfx5700 (environment)

Ex4600 · Juniperdevice

80%

All versions

Ex4650 · Juniperdevice

80%

All versions

Qfx5100 · Juniperdevice

80%

All versions

Qfx5110 · Juniperdevice

80%

All versions