CVE-2026-102070
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-617
Impact
Remote, unauthenticated attackers can crash the rmopd service to cause a denial of service. They only need network access to send a crafted TCP packet to the TWAMP client.
Root cause
A reachable assertion failure is triggered when the TWAMP client processes a specific TCP packet.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the fixed Junos OS release specified in Juniper advisory JSA112188. If you cannot patch immediately, disable the TWAMP client or restrict network access to the TWAMP control port via firewall filter.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific TCP packet.