CVE-2024-47489

CVE-2024-47489 is an Improper Handling of Exceptional Conditions vulnerability affecting Juniper Networks Junos OS Evolved on ACX Series devices. An unauthenticated, network-based attacker can send specific transit protocol traffic, causing the Routing Engine to incorrectly process it and fill the DDoS protection queue. This leads to DDoS protection violations and protocol flaps, resulting in a partial Denial of Service (DoS) to downstream devices for both IPv4 and IPv6 traffic. Rated with a CVSS score of 5.8 (MEDIUM), the vulnerability has a low attack complexity and requires no user interaction or privileges, but its impact is limited to availability. The EPSS score is very low at 0.00073, indicating a low probability of exploitation. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, suggesting a low level of public awareness or concern.