CVE-2026-33786 Details
Description
An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300 and SRX4300 allows a local attacker with low privileges to cause a complete Denial of Service (DoS). When a specific 'show chassis' CLI command is executed, chassisd crashes and restarts which causes a momentary impact to all traffic until all modules are online again. This issue affects Junos OS on SRX1600, SRX2300 and SRX4300: * 24.4 versions before 24.4R1-S3, 24.4R2. This issue does not affect Junos OS versions before 24.4R1.
A denial-of-service vulnerability has been identified in the chassis control daemon (chassisd) of Juniper Networks Junos OS, specifically on SRX1600, SRX2300, and SRX4300 platforms running certain 24.4 versions. This vulnerability allows a local attacker with low privileges to cause chassisd to crash and restart, temporarily disrupting all traffic until the modules are back online. The issue arises when the 'show chassis' CLI command is executed.
Users can upgrade to Junos OS versions 24.4R1-S3, 24.4R2, 25.2R1, or any subsequent release to address this vulnerability. Additionally, access lists or firewall filters can be used to restrict CLI access to trusted hosts and administrators, and CLI authorization can be implemented to prevent the execution of the 'show chassis' command.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://kb.juniper.net/JSA107810 | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-754 | Improper Check for Unusual or Exceptional Conditions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| juniper junos | 24.4 - 24.4 r1 24.4 r1-s2 24.4 r2 |
CPE
Remediation
| |
| juniper srx1600 | All versions |
CPE
Remediation
| |
| juniper srx2300 | All versions |
CPE
Remediation
| |
| juniper srx4300 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 17, 2026 | Initial Analysis | [email protected] |
| Apr 9, 2026 | New CVE Received | [email protected] |