An improper exception handling vulnerability exists in the chassis control daemon of Juniper Networks Junos OS versions 24.4 through 24.4R2 on SRX1600, SRX2300, and SRX4300 security appliances. When a specific show chassis CLI command is executed, the vulnerable daemon crashes and restarts, causing a complete denial of service affecting all traffic until all modules are online again. The vulnerability carries a CVSS score of 5.5 (Medium severity) with a local attack vector requiring low privilege credentials and no user interaction. The attack requires local access to the device and no special configuration, making it relatively straightforward to execute for authenticated users with minimal permissions. The impact is limited to availability, with no confidentiality or integrity concerns. There is no evidence of active exploitation in the wild or public exploit code availability. The vulnerability is not tracked on the CISA Known Exploited Vulnerabilities catalog and remains inactive on threat intelligence hot lists. The EPSS score of 0.00014 indicates minimal probability of exploitation based on current threat landscape data, suggesting this remains a low-priority concern from an immediate exploitation standpoint, though administrators should still apply available patches to affected platforms.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
24.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:* | ||
24.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:* | ||
24.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:* | ||
24.4CPE matchmatch criteria | cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
2026-04 Security Bulletin: Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes (CVE-2026-33786)
Apr 9, 20262026-04 Security Bulletin: Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes (CVE-2026-33786)
Apr 8, 2026