Back to overview

CVE-2026-57028

HIGH
7.3
CVSS 3.1
Description
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Due to an incorrect initialization, a process which should only be able to communicate internally within the device, can be reached over the network via an open port. This leads to unauthorized access to the license management. This issue affects all Junos OS Evolved versions before 23.2R2-EVO.

Metadata

CVE ID
CVE-2026-57028
State
PUBLISHED
Assigner
juniper
Reserved
2026-06-23 16:27 UTC
Published
2026-07-09 21:08 UTC
Last updated
2026-07-09 21:08 UTC
Primary CWE
CWE-923
CWE-923 Improper Restriction of Communication Channel to Int…
Vendor / Product
Juniper Networks / Junos OS Evolved
Sources
cve.org  ·  NVD

Severity & Metrics

7.3 HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products (1)
VendorProductPlatformVersions
Juniper Networks Junos OS Evolved — 0 < 23.2R2-EVO
Weakness (CWE)
CWESourceDescription
CWE-923 cna CWE-923 Improper Restriction of Communication Channel to Intended Endpoints
CVSS scores (2)
ScoreSeverityVersionSourceVector
7.3 HIGH 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
6.9 MEDIUM 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/AU:Y/R:U/RE:M
References (1)
Back to overview