CVE-2023-36843

CVE-2023-36843 is an Improper Handling of Inconsistent Special Elements vulnerability in Juniper Networks Junos OS, specifically affecting the Junos Services Framework (jsf) module when Advanced Threat Prevention (ATP) Cloud with Encrypted Traffic Insights is enabled. An unauthenticated network-based attacker can trigger a Packet Forwarding Engine (PFE) crash by sending malformed SSL traffic, leading to a Denial of Service (DoS) that requires a manual device restart. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a severe impact. It can be exploited remotely over the network with low attack complexity, requiring no user interaction or privileges. The primary impact is a complete denial of service for affected devices. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness or attention at this time.