CVE-2024-39519

CVE-2024-39519 is an Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series devices. This flaw allows an unauthenticated, adjacent attacker to trigger a Denial-of-Service (DoS) by causing a traffic loop when multicast packets are sent from a dual-homed Customer Edge device to two Provider Edge devices configured with IRBs. The vulnerability affects Junos OS Evolved versions from 22.2R1-EVO up to, but not including, 22.4R2-EVO. Rated Medium severity with a CVSS score of 6.5, the attack vector is adjacent (AV:A) and requires low attack complexity (AC:L), with no privileges or user interaction needed. The primary impact is high availability loss (A:H) due to the DoS condition. Currently, there is no evidence of active exploitation, nor is exploit code publicly available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.