CVE-2026-102023
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-617
Impact
Authenticated network attackers can trigger a denial of service by crashing the fwstatsd daemon using an SNMP firewall-counter MIB query. This requires network access, valid SNMP credentials, and at least one firewall counter configured on the device.
Root cause
A reachable assertion failure in the fwstatsd process crashes the daemon upon receiving a specific SNMP firewall-counter MIB request.
Affected systems
Juniper Networks Junos OS Evolved (specific version ranges not listed — check the vendor advisory).
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the fixed Junos OS Evolved release specified in advisory JSA112250, or temporarily block/restrict SNMP queries for firewall-counter MIBs from untrusted hosts.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-counter MIB query when at least one firewall counter is configured.