CVE-2023-22392

CVE-2023-22392 describes a memory leak vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS, impacting various PTX and QFX series devices. An unauthenticated, adjacent attacker can trigger this flaw by sending specific flow-routes over an established BGP session, leading to FPC heap memory exhaustion and a Denial of Service (DoS). The vulnerability has a CVSS score of 6.5 (Medium), indicating a relatively low attack complexity (AC:L) but a high impact on availability (A:H) once exploited. The attack vector is adjacent (AV:A), meaning the attacker must be on the same local network segment. Currently, there is no evidence of active exploitation, nor are there publicly available exploit codes in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting a low level of public awareness or concern at this time.