This vulnerability (CVE-2026-33783) is a function call with incorrect argument type (CWE-686) in the sensor interface of Juniper Junos OS Evolved on PTX Series devices. When colored SRTE policy tunnels are provisioned via PCEP and monitored using gRPC, if the Originator ASN field in PCEP contains a 32-bit ASN value greater than 65,535, the evo-aftmand process crashes and fails to restart, causing a complete denial of service. The system remains down until manually rebooted. The issue is not reproducible with statically configured SRTE policy tunnels. Multiple versions prior to specified patch releases are affected.

An authenticated network attacker with low privileges can trigger a complete and persistent denial of service on affected Junos OS Evolved PTX Series devices by exploiting this vulnerability. The service impact is total, as the critical evo-aftmand process crashes and does not recover automatically, requiring manual system restart. There is no impact on confidentiality or integrity reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is indicated in the provided data. Until a patch is available, avoid provisioning colored SRTE policy tunnels via PCEP with Originator ASN values larger than 65,535 when using gRPC monitoring. Static configuration of SRTE policy tunnels does not trigger the issue and may be used as a temporary mitigation.