CVE-2022-22216 is a sensitive information exposure vulnerability affecting Juniper Networks Junos OS on PTX Series and QFX10k Series devices. The flaw, similar to 'Etherleak' (CVE-2003-0001), allows an adjacent, unauthenticated attacker to access fragments of system memory or previous packet data due to unreliable Ethernet packet padding. Rated Medium severity with a CVSS score of 4.3 (AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), it requires physical proximity for exploitation and primarily impacts confidentiality. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 18.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
18.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:* | ||
18.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:* | ||
18.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:* | ||
18.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.