CVE-2026-33803

{"id": "CVE-2026-33803", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33803", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-10T13:30:15.593698Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "sirt@juniper.net", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "sirt@juniper.net", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 6.9, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "sirt@juniper.net", "affectedData": [{"vendor": "Juniper Networks", "product": "Junos OS Evolved", "versions": [{"status": "affected", "version": "0", "lessThan": "23.2R2-S7-EVO", "versionType": "custom"}, {"status": "affected", "version": "23.4", "lessThan": "23.4R2-S8-EVO", "versionType": "custom"}, {"status": "affected", "version": "24.2", "lessThan": "24.2R2-S5-EVO", "versionType": "custom"}, {"status": "affected", "version": "24.4", "lessThan": "24.4R2-S4-EVO", "versionType": "custom"}, {"status": "affected", "version": "25.2", "lessThan": "25.2R2-S1-EVO", "versionType": "custom"}, {"status": "affected", "version": "25.4", "lessThan": "25.4R1-S2-EVO", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-09T22:17:03.807", "references": [{"url": "https://supportportal.juniper.net/JSA110078", "tags": ["Vendor Advisory"], "source": "sirt@juniper.net"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "sirt@juniper.net", "description": [{"lang": "en", "value": "CWE-923"}]}], "descriptions": [{"lang": "en", "value": "An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device.\n\n\nDue to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets.\n\nThis issue affects Junos OS Evolved:\n\n\n * all versions before 23.2R2-S7-EVO,\n * 23.4 versions before 23.4R2-S8-EVO,\n * 24.2 versions before 24.2R2-S5-EVO,\n * 24.4 versions before 24.4R2-S4-EVO,\n * 25.2 versions before 25.2R2-S1-EVO,\n * 25.4 versions before 25.4R1-S2-EVO."}], "lastModified": "2026-07-13T20:59:26.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEF76CCC-68C0-462C-BB8B-2135A90F3B01", "versionEndExcluding": "23.2"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DEAA7FD-385F-4221-907E-65ABC16BE4BE"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDEC008A-3137-48D1-8ABC-6DB0EFC40E50"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "558D234D-BC50-415F-86D6-8E19D6C3ACE0"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33F4EEEE-77E9-4973-A770-99E7BA2F05F5"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4BB6910-B994-45FD-8153-5EC00EE842E6"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D657944B-2066-4F2C-BC92-EDF4DE1C165C"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75A58924-6348-44CF-AB39-1FCE17FE81AC"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A903B31-D9E5-43FA-B09F-7E7769803720"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E23BEA27-77F8-4CDF-A49A-FEF9C33DA513"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DD20427-FB6A-46CE-B20F-D62CCC9B4A02"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r2-s6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31A05D5F-9765-49A8-B9DA-64B05E399935"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D7F0D73-85EE-4A07-B51B-6BF52ECBA75E"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE777A1F-9CD9-426E-AF1C-FBE01EB9A4A8"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7147BA60-30A5-4CED-9AAF-F6BEA0528B89"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E5CE59B-14B2-4F4C-81B5-0430EC954956"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB82B22F-9005-4EF0-A1E3-4261757783D4"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0224D3F1-8B86-432C-8F5B-B4B7B69ADF31"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB2FE5FE-0ADE-406E-A23D-FDCC104B2496"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E58987A-D7B7-4FFF-9969-E8FD76AE2BE3"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E779C0D4-A8F7-4976-B3C8-B9802B96E715"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7457415-D893-474B-ABA6-9841BB5CC6DB"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EFB8038-F336-4038-9AEA-C24253FAD578"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39CDE4A5-0C54-41BD-B53F-9215FD1E61D3"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DD89AAD-C615-42AF-B8AF-E6067862F0F5"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28AFF11D-E418-4A76-B557-F60622602537"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r1-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A86A69D-2B90-4B3B-A6EC-88358284787D"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "080BEA58-9667-4C2C-810D-DC1187DB67DA"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34072A94-CFEB-4FAA-8E68-E98D4F7602E4"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C79FF7EC-AD91-4F9F-B8AC-B1A9C9271816"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C61DC50-CAB6-4197-90C8-A2B48EE8F761"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "178FFC73-28CC-471E-A1E8-1AF8BC731DD6"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B32ADA05-5F5D-45B6-BB7B-3FA6A6F229F5"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6526E82-A6A6-4A65-9B01-B3FCB947F44E"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF3B74FA-DF84-4E3E-BCF9-44EEF9E45910"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC024CDE-DA63-4E87-BA97-5E8C06B0D8B7"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25DA0DD2-E974-448C-BD05-ED6FCA4725FB"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5F6F47F-0C86-4554-8517-A6A0CD29B3B0"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EDB7A3C-D1F5-4D24-8B8C-F104EC8C7D42"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E79AD72B-D9B3-4BCB-BCAE-B0B5127D76AD"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAF96553-DB70-4DFA-8658-306A7477DD06"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83C415EF-E87B-4259-A836-59B3A9C3914B"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFD32E67-9D8D-437D-96BC-CA97A1F686BA"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E5D9967-1B53-427B-9B23-77DC399F3D71"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB843A79-1B1C-4638-96B9-F1F191F1F75F"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB88E877-1028-4B5C-BAE2-6C606D607FE9"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.4:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21728887-97A1-4AC7-8121-B6CEA5D6BAB4"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.4:r1-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F96EA365-93FE-423E-AC9F-CABEAFF25B0C"}], "operator": "OR"}]}], "sourceIdentifier": "sirt@juniper.net"}