CVE-2022-24805 has been resolved in net-SNMP software included with Juniper Networks Junos OS and Junos OS Evolved.

This issue affects:

Junos OS:

• all versions before 23.2R2-S6,
• 23.4 versions before 23.4R2-S7,
• 24.2 versions before 24.2R2-S4,
• 24.4 versions before 24.4R2-S3,
• 25.2 versions before 25.2R1-S2, 25.2R2;

Junos OS Evolved:

• all versions before 23.2R2-S6-EVO,
• 23.4 versions before 23.4R2-S8-EVO,
• 24.2 versions before 24.2R2-S4-EVO,
• 24.4 versions before 24.4R2-S3-EVO,
• 25.2 versions before 25.2R1-S2-EVO, 25.2R2-EVO.

The following minimal configuration is required to be potentially impacted by this issue:

[ snmp ]

Juniper SIRT is not aware of any malicious exploitation of this vulnerability.

This issue was discovered during external security research.

The following software releases have been updated to resolve this specific issue:
Junos OS: 23.2R2-S6, 23.4R2-S7, 24.2R2-S4, 24.4R2-S3, 25.2R1-S2, 25.2R2, 25.4R1, and all subsequent releases;
Junos OS Evolved: 23.2R2-S6-EVO, 23.4R2-S8-EVO*, 24.2R2-S4-EVO, 24.4R2-S3-EVO, 25.2R1-S2-EVO, 25.2R2-EVO, 25.4R1-EVO, and all subsequent releases.

* Future Release

This issue is being tracked as 1906718 which is visible on the Customer Support website.

Note: Juniper SIRT's policy is not to evaluate releases which are beyond End of Engineering (EOE) or End of Life (EOL).

Use access lists or firewall filters to limit access to the device only from trusted hosts and administrators.

2026-04-08: Initial Publication

2026-04-13: Added indication that 23.4R2-S8-EVO is a future release not yet published

• KB16613: Overview of the Juniper Networks SIRT Quarterly Security Bulletin Publication Process [juniper.net]
• KB16765: In which releases are vulnerabilities fixed? [juniper.net]
• KB16446: Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories [juniper.net]
• Report a Security Vulnerability - How to Contact the Juniper Networks Security Incident Response Team