CVE-2026-33773 Junos OS资源初始化错误漏洞

# PoC Concept: Configuration leading to CVE-2026-33773 impact # This demonstrates the vulnerable setup on Junos OS # Define a firewall filter intended to block specific traffic (e.g., telnet) firewall { family inet { filter VULNERABLE_FILTER { term block_bad_traffic { from { protocol tcp; destination-port 23; # Telnet } then { discard; } } term accept_other { then accept; } } } } # Vulnerable Configuration Scenario: # Applying the SAME filter to both IRB and Physical Interface as output interfaces { irb { unit 100 { family inet { filter { output VULNERABLE_FILTER; # Filter applied to IRB } address 192.168.1.1/24; } } } xe-0/0/0 { unit 0 { family inet { filter { output VULNERABLE_FILTER; # Same filter applied to Physical Interface (VULNERABLE) } address 10.0.0.1/24; } } } } # Exploitation: # Due to the Incorrect Initialization of Resource, only one filter is active. # An attacker sends TCP traffic to port 23. # Expected: Traffic is dropped. # Actual: Traffic might pass through if the active filter instance is on the interface not traversed by the specific flow logic or if the second filter instance failed to load.