CVE-2026-33773 Details
Description
An Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series and QFX Series device allows an unauthenticated, network-based attacker to cause an integrity impact to downstream networks. When the same family inet or inet6 filter is applied on an IRB interface and on a physical interface as egress filter on EX4100, EX4400, EX4650 and QFX5120 devices, only one of the two filters will be applied, which can lead to traffic being sent out one of these interfaces which should have been blocked. This issue affects Junos OS on EX Series and QFX Series: * 23.4 version 23.4R2-S6, * 24.2 version 24.2R2-S3. No other Junos OS versions are affected.
A vulnerability allowing an integrity impact to downstream networks has been identified in Juniper Networks Junos OS on specific EX Series and QFX Series devices. This vulnerability arises from an incorrect initialization of resource in the packet forwarding engine (PFE). When the same family inet or inet6 filter is applied as an egress filter on both an IRB interface and a physical interface, only one of the filters is applied. This can result in traffic being sent out an interface that should have been blocked. The vulnerability affects Junos OS versions 23.4R2-S6 and 24.2R2-S3 on EX4100, EX4400, EX4650, and QFX5120 devices.
Users can update to Junos OS versions 23.4R2-S7 or 24.2R2-S4, where this vulnerability has been fixed. Alternatively, the same filter can be applied under a different name to one of the interfaces, or the filter can be configured as 'interface specific' to create a unique copy for each interface.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://kb.juniper.net/JSA107815 | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| juniper junos | 23.4 r2-s6 24.2 r2-s3 |
CPE
Remediation
| |
| juniper ex2300 | All versions |
CPE
Remediation
| |
| juniper ex2300-c | All versions |
CPE
Remediation
| |
| juniper ex3400 | All versions |
CPE
Remediation
| |
| juniper ex4000 | All versions |
CPE
Remediation
| |
| juniper ex4100 | All versions |
CPE
Remediation
| |
| juniper ex4100-f | All versions |
CPE
Remediation
| |
| juniper ex4100-h | All versions |
CPE
Remediation
| |
| juniper ex4300 | All versions |
CPE
Remediation
| |
| juniper ex4400 | All versions |
CPE
Remediation
| |
| juniper ex4600 | All versions |
CPE
Remediation
| |
| juniper ex4650 | All versions |
CPE
Remediation
| |
| juniper ex9204 | All versions |
CPE
Remediation
| |
| juniper ex9208 | All versions |
CPE
Remediation
| |
| juniper ex9214 | All versions |
CPE
Remediation
| |
| juniper qfx10008 | All versions |
CPE
Remediation
| |
| juniper qfx10016 | All versions |
CPE
Remediation
| |
| juniper qfx5110 | All versions |
CPE
Remediation
| |
| juniper qfx5120 | All versions |
CPE
Remediation
| |
| juniper qfx5130 | All versions |
CPE
Remediation
| |
| juniper qfx5200 | All versions |
CPE
Remediation
| |
| juniper qfx5210 | All versions |
CPE
Remediation
| |
| juniper qfx5220 | All versions |
CPE
Remediation
| |
| juniper qfx5230-64cd | All versions |
CPE
Remediation
| |
| juniper qfx5240 | All versions |
CPE
Remediation
| |
| juniper qfx5241 | All versions |
CPE
Remediation
| |
| juniper qfx5700 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 17, 2026 | Initial Analysis | [email protected] |
| Apr 9, 2026 | New CVE Received | [email protected] |