CVE-2024-39535

CVE-2024-39535 describes an Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper Networks Junos OS Evolved on ACX 7000 Series devices, specifically affecting versions 22.4R2-S1 and 22.4R2-S2. An unauthenticated, adjacent attacker can exploit this flaw by sending specific traffic to a device with a Layer 3 or IRB interface configured in a VPLS instance, causing the evo-pfemand process to crash and resulting in a Denial-of-Service (DoS) for the affected FPC. The vulnerability has a CVSS score of 6.5 (Medium), indicating a low attack complexity and no user interaction required, with a high impact on availability. The attack vector is adjacent, meaning the attacker must be on the same local network segment. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for the majority of reported vulnerabilities.