Juniper Junos OS (QFX5000-Series, EX4600-Series): A physical-access path into affected QFX5000 and EX4600 switches

Impact

A physical-access path into affected QFX5000 and EX4600 switches. QFX5000 is a mainstream data-center leaf platform. Physical-access bugs matter more in this market than they used to: GPU capacity is increasingly resold, subleased and colocated, so 'someone was alone in the rack' is a routine event rather than an exotic threat model.

Who can reach it

Physical access to the switch. Realistic in colocation, shared cages, subleased capacity, and during rack-and-stack by contractors.

What to do

Junos upgrade plus reboot on affected QFX5000/EX4600 platforms. Pair with physical controls — locked cabinets, console-port discipline, and tamper-evident seals — because a firmware patch does not address the underlying access.

References