This vulnerability (CWE-923) in Juniper Networks Junos OS Evolved arises from improper restriction of communication channels to intended endpoints. A process that should only communicate internally is accessible externally via an open network port due to incorrect initialization. This exposure allows unauthenticated network-based attackers to cause limited information disclosure and degrade device availability by increasing CPU usage processing ingress packets. The affected versions include all versions before 23.2R2-S7-EVO, 23.4 versions before 23.4R2-S8-EVO, 24.2 versions before 24.2R2-S5-EVO, 24.4 versions before 24.4R2-S4-EVO, 25.2 versions before 25.2R2-S1-EVO, and 25.4 versions before 25.4R1-S2-EVO.

An unauthenticated attacker can access a process that should be restricted internally, leading to limited information disclosure and increased CPU consumption on the device. This can cause reduced availability due to resource exhaustion. There is no indication of integrity impact or full compromise. The CVSS score is 6.5 (medium severity), reflecting network attack vector, no privileges required, no user interaction, and limited confidentiality and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability affects multiple versions prior to specific fixed releases, so upgrading to the fixed versions is recommended once official patches are available. Until then, monitor vendor communications for updates and apply patches promptly when released.