CVE-2026-102069
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
Adjacent attackers impersonating a configured ICCP peer can crash the device or potentially execute code as root. They must be on the local network segment acting as the peer with dot1x synchronization enabled on Junos Fusion Aggregation Devices.
Root cause
A stack-based buffer overflow in the dot1x daemon occurs when processing synchronization traffic in a Junos Fusion satellite setup.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS to the fixed release specified in Juniper advisory JSA112188. If upgrading cannot happen immediately, disable dot1x synchronization on the Junos Fusion Aggregation Devices or restrict access to the ICCP peer interface.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is triggered when dot1x synchronization is enabled for the required Fusion satellite topology.