CVE-2022-22232

CVE-2022-22232 is a NULL Pointer Dereference vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS on SRX Series devices. When Unified Threat Management (UTM) Enhanced Content Filtering is enabled and specific transit traffic is processed, an unauthenticated, network-based attacker can cause a Denial of Service (DoS) by crashing and restarting the PFE. This vulnerability affects Junos OS versions 21.4 prior to 21.4R1-S2/21.4R2, and 22.1 prior to 22.1R1-S1/22.1R2 on SRX Series. Rated with a CVSS score of 7.5 (HIGH), the vulnerability has a network attack vector and low attack complexity, requiring no user interaction or privileges. The primary impact is a complete loss of availability due to the DoS. There is currently no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, indicating low public attention.