7.1
HighCVSS 3.1 · from juniper
CVE-2026-103411
Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing
Session Smart Router · CWE-191 · CWE-191AffectedSession Smart Router
FixUpdate to 7.0.5, 7.1.7, 7.2.3 or newer
PublishedOct 28, 16:37 · juniper
ScoredOct 28 · 7.1 · juniper
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:11 UTC
What we know
No known exploitation. CISA KEV, checked 22:11 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker has to be on the same network. CVSS: adjacent network.
A successful attack can take the service down. CVSS impact.
Description
An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply.
From juniper
Affected and fixed versions
ProductAffectedFixed inSession Smart Routerbefore 7.0.57.0.5Session Smart Router7.1.0 – before 7.1.77.1.7Session Smart Router7.2.0 – before 7.2.37.2.3
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known