CVE-2022-22177

mediumpriority · track · 30EPSS 0.010 · 61 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.96% (61st) EPSS

CVSS 5 · medium

Is it mine?

54 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service (DoS) to the service until it is manually restarted. This issue impacts any version of SNMP – v1,v2, v3 This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S20; 15.1 versions prior to 15.1R7-S11; 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2. Juniper Networks Junos OS Evolved 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO.

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · ENISA EU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · sirt@juniper.net USexploitability 3.9 · impact 1.4

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-755USCWE-755US

affected products (54)

Products and version ranges known to be affected.

Juniper Networks Junos OS12.3 → 12.3R12-S20enisa_euvdEU
Juniper Networks Junos OS15.1 → 15.1R7-S11enisa_euvdEU
Juniper Networks Junos OS18.3 → 18.3R3-S6enisa_euvdEU
Juniper Networks Junos OS18.4 → 18.4R2-S9, 18.4R3-S10enisa_euvdEU
Juniper Networks Junos OS19.1 → 19.1R2-S3, 19.1R3-S7enisa_euvdEU
Juniper Networks Junos OS19.2 → 19.2R1-S8, 19.2R3-S4enisa_euvdEU
Juniper Networks Junos OS19.3 → 19.3R3-S4enisa_euvdEU
Juniper Networks Junos OS19.4 → 19.4R2-S5, 19.4R3-S6enisa_euvdEU
Juniper Networks Junos OS20.1 → 20.1R3-S2enisa_euvdEU
Juniper Networks Junos OS20.2 → 20.2R3-S3enisa_euvdEU
Juniper Networks Junos OS20.3 → 20.3R3-S1enisa_euvdEU
Juniper Networks Junos OS20.4 → 20.4R3enisa_euvdEU
Juniper Networks Junos OS21.1 → 21.1R2-S2, 21.1R3enisa_euvdEU
Juniper Networks Junos OS21.2 → 21.2R1-S2, 21.2R2enisa_euvdEU
Juniper Networks Junos OS Evolved21.3 → 21.3R2-EVOenisa_euvdEU
Juniper Networks Junos OS Evolvedunspecified → 21.2R3-EVOenisa_euvdEU
Juniper Networks Inc. JunOS12.3 → 12.3R12-S20fstec_bduRU
Juniper Networks Inc. JunOS15.1 → 15.1R7-S11fstec_bduRU
Juniper Networks Inc. JunOS18.3 → 18.3R3-S6fstec_bduRU
Juniper Networks Inc. JunOS18.4 → 18.4R2-S9fstec_bduRU

showing 20 of 54

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2022-01-19modified 2026-06-17

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan