Is CVE-2023-44185 being actively exploited?

CVE-2023-44185 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2023-44185?

CVE-2023-44185 has a CVSS 3.1 base score of 7.5 (HIGH).

CVE-2023-44185

HIGH · CVSS 7.5EPSS 0.6%EU EUVD

An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of Service (DoS )to the device upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet. Continued receipt of this packet will cause a sustained Denial of Service condition. This issue affects: * Juniper Networks Junos OS: * All versions prior to 20.4R3-S6; * 21.1 versions prior to 21.1R3-S5; * 21.2 versions prior to 21.2R3-S4; * 21.3 versions prior to 21.3R3-S3; * 21.4 versions prior to 21.4R3-S3; * 22.1 versions prior to 22.1R2-S2, 22.1R3; * 22.2 versions prior to 22.2R2-S1, 22.2R3; * 22.3 versions prior to 22.3R1-S2, 22.3R2. Juniper Networks Junos OS Evolved: * All versions prior to 20.4R3-S6-EVO; * 21.1-EVO version 21.1R1-EVO and later versions prior to 21.2R3-S4-EVO; * 21.3-EVO versions prior to 21.3R3-S3-EVO; * 21.4-EVO versions prior to 21.4R3-S3-EVO; * 22.1-EVO versions prior to 22.1R3-EVO; * 22.2-EVO versions prior to 22.2R2-S1-EVO, 22.2R3-EVO; * 22.3-EVO versions prior to 22.3R1-S2-EVO, 22.3R2-EVO.

Key facts

CVSS score: 7.5 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-20
EPSS score: 0.6% (48th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2023-48544)
Published: October 13, 2023
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2023-48544 in the EU Vulnerability Database. Last updated in EUVD on September 19, 2024.

View on the EU Vulnerability Database

Affected products

juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos

and 79 more…

Certified products that may be affected

5 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Junos Space Network Management Platform, with or without Network Director and with or without Security Director in JA2500 - Juniper Networks, Inc. - FIPS 140 3816 - historical
Juniper Networks SRX345/SRX345-DUAL-AC with Junos 15.1X49-D110 - Juniper Networks, Inc. - FIPS 140 3247 - historical
Junos-FIPS 10.4 L2 OS Cryptographic Module - Juniper Networks, Inc. - FIPS 140 1813 - historical
Junos-FIPS 10.4 L1 OS Cryptographic Module - Juniper Networks, Inc. - FIPS 140 1772 - historical
JUNOS-FIPS - Juniper Networks, Inc. - FIPS 140 602 - historical

References

https://supportportal.juniper.net/JSA73146(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain