CVE-2023-28974

CVE-2023-28974 is an Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper Networks Junos OS bbe-smgd, affecting MX Series devices in Broadband Edge/Subscriber Management scenarios. An unauthenticated, adjacent attacker can trigger a Denial of Service (DoS) by sending a specifically malformed ICMP packet, causing the bbe-smgd process to crash and disrupt subscriber sessions. Rated Medium severity with a CVSS score of 6.5, the attack vector is adjacent (AV:A) with low attack complexity (AC:L), requiring no privileges or user interaction. The primary impact is high availability loss (A:H) due to sustained DoS if packets continue to be received. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this vulnerability.