7.5
HighCVSS 3.1 · from juniper
CVE-2026-103410
Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection
Session Smart Router · Integer overflow · CWE-190AffectedSession Smart Router
FixUpdate to 7.0.5, 7.1.7, 7.2.3 or newer
PublishedOct 28, 16:37 · juniper
ScoredOct 28 · 7.5 · juniper
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:09 UTC
What we know
No known exploitation. CISA KEV, checked 22:09 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
A successful attack can take the service down. CVSS impact.
Description
An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate.
From juniper
Affected and fixed versions
ProductAffectedFixed inSession Smart Routerbefore 7.0.57.0.5Session Smart Router7.1.0 – before 7.1.77.1.7Session Smart Router7.2.0 – before 7.2.37.2.3
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known