CVE-2026-102047: CWE-1288 Improper Validation of Consistency within Input in Juniper Networks Junos OS
Description
CVE-2026-102047 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the l2cpd process. It involves improper validation of consistency within input, allowing an adjacent unauthenticated Layer 2 attacker to cause denial of service by sending crafted MVRP Ethernet frames to an MVRP-enabled interface. This impacts Layer 2 control protocols availability but does not affect confidentiality or integrity.
CVSS v3.1
Score 6.5medium
Affected software
Juniper Networks
Junos OS
Juniper Networks
Junos OS Evolved
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-1288) exists in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved. An adjacent unauthenticated attacker on Layer 2 can send specially crafted Multiple VLAN Registration Protocol (MVRP) Ethernet frames to an MVRP-enabled interface, causing improper validation of input consistency. This leads to a denial of service condition affecting associated Layer 2 control protocols. The vulnerability does not impact confidentiality or integrity but results in availability degradation. The CVSS 3.1 base score is 6.5 (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Potential Impact
An unauthenticated attacker with adjacent Layer 2 access can cause a denial of service in Layer 2 control protocols by exploiting improper input validation in the l2cpd process. This affects network availability but does not compromise confidentiality or integrity of data.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict Layer 2 access to trusted devices and monitor for anomalous MVRP traffic on MVRP-enabled interfaces.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- juniper
- Date Reserved
- 2026-09-28T17:35:40.522Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acfb6692cdf04f6569794d2
Added to database: 10/14/2026, 17:05:45 UTC
Last enriched: 10/14/2026, 18:19:51 UTC
Last updated: 10/14/2026, 19:00:32 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.