The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA112171 advisory.

  - An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks     Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information     disclosure and availability impact to the device. Due to a wrong initialization, a process which should     only be able to communicate internally within the device can be reached over the network via an open port.
    This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress     packets. This issue affects Junos OS Evolved: * all versions before 23.2R2-S7-EVO, * 23.4 versions before     23.4R2-S8-EVO, * 24.2 versions before 24.2R2-S5-EVO, * 24.4 versions before 24.4R2-S4-EVO, * 25.2 versions     before 25.2R2-S1-EVO, * 25.4 versions before 25.4R1-S2-EVO. (CVE-2026-33803)

  - An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks     Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information     disclosure and availability impact to the device. Due to a wrong initialization, a process which should     only be able to communicate internally within the device can be reached over the network via an open port.
    This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress     packets. This issue affects Junos OS Evolved: * All versions before 23.2R2-S7.7-EVO; * 23.4 versions     before 23.4R2-S8.11-EVO; * 24.2 versions before 24.2R2-S5.6-EVO; * 24.4 versions before 24.4R2-S4-EVO; *     25.2 version before 25.2R2-S1-EVO; * 25.4 versions before 25.4R1-S1-EVO. Please note that this issue is     similar to but not identical CVE-2026-33803. (CVE-2026-102085)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Juniper Junos OS Multiple Vulnerabilities (JSA112171)

medium Nessus Plugin ID 365677

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Oct 23, 2026, 5:56 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202610231756
Version 1.2 Oct 15, 2026, 8:27 AM CVSSv2 score source (changed from "CVE-2026-102085" to "CVE-2026-33803") CVSSv3 score source (changed from "CVE-2026-33803" to none) Plugin Feed: 202610150827
Version 1.1 Oct 14, 2026, 10:44 PM New Plugin Feed: 202610142244