CVE-2024-30391

MEDIUM
Published Apr 12, 2024 Modified Apr 11, 2025 CWE-306

Description

A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated network-based attacker to cause limited impact to the integrity or availability of the device. If a device is configured with IPsec authentication algorithm hmac-sha-384 or hmac-sha-512, tunnels are established normally but for traffic traversing the tunnel no authentication information is sent with the encrypted data on egress, and no authentication information is expected on ingress. So if the peer is an unaffected device transit traffic is going to fail in both directions. If the peer is an also affected device transit traffic works, but without authentication, and configuration and CLI operational commands indicate authentication is performed. This issue affects Junos OS: * All versions before 20.4R3-S7, * 21.1 versions before 21.1R3,  * 21.2 versions before 21.2R2-S1, 21.2R3,  * 21.3 versions before 21.3R1-S2, 21.3R2.

Is your site exposed to CVE-2024-30391?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

4.8
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Weakness Type (CWE)

CWE-306 Missing Authentication

Affected Products

Vendor Product
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper junos
juniper csrx
juniper mx240
juniper mx480
juniper mx960
juniper srx100
juniper srx110
juniper srx1400
juniper srx1500
juniper srx1600
juniper srx210
juniper srx220
juniper srx2300
juniper srx240
juniper srx240h2
juniper srx240m
juniper srx300
juniper srx320
juniper srx340
juniper srx3400
juniper srx345
juniper srx3600
juniper srx380
juniper srx4000
juniper srx4100
juniper srx4200
juniper srx4300
juniper srx4600
juniper srx4700
juniper srx5000
juniper srx5400
juniper srx550
juniper srx550_hm
juniper srx550m
juniper srx5600
juniper srx5800
juniper srx650
juniper vsrx

References

Frequently Asked Questions

What is CVE-2024-30391? +
A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated network-based attacker to cause limited impact to the integrity or availability of the device. If a device is configured with IPsec authentication algorithm hmac-sha-384 or hmac-sha-512, tunnels are established normally but for traffic traversing the tunnel no authentication information is sent with the encrypted data on egress, and no authentication information is expected on ingress. So if the peer is an unaffected device transit traffic is going to fail in both directions. If the peer is an also affected device transit traffic works, but without authentication, and configuration and CLI operational commands indicate authentication is performed. This issue affects Junos OS: * All versions before 20.4R3-S7, * 21.1 versions before 21.1R3,  * 21.2 versions before 21.2R2-S1, 21.2R3,  * 21.3 versions before 21.3R1-S2, 21.3R2. It has a CVSS v3.1 base score of 4.8 (MEDIUM).
How severe is CVE-2024-30391? +
CVE-2024-30391 has a CVSS v3.1 score of 4.8 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-30391? +
CVE-2024-30391 affects products from juniper, specifically: csrx, junos, mx240, mx480, mx960, srx100, srx110, srx1400, srx1500, srx1600, srx210, srx220, srx2300, srx240, srx240h2, srx240m, srx300, srx320, srx340, srx3400, srx345, srx3600, srx380, srx4000, srx4100, srx4200, srx4300, srx4600, srx4700, srx5000, srx5400, srx550, srx550_hm, srx550m, srx5600, srx5800, srx650, vsrx. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-30391? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-30391 — free, no signup required.