Database/Firmware, BMC & network fabric
Junos OS Evolved jti-dialoutd: crafted sensor resource causes persistent telemetry dial-out outage
Impact
A format string flaw in the telemetry dial-out daemon lets an authenticated attacker submit a crafted analytics sensor resource through the gNMI listener and permanently stop telemetry dial-out on the device - Juniper describes the denial of service as persistent, meaning it survives beyond the request. Operators lose the interface counters, queue depth and link error streams they use to spot fabric congestion and silent packet loss on GPU traffic, so a training slowdown becomes invisible rather than diagnosable. This is a different daemon and a different injection point than the gRPC daemon flaw in the same advisory, and the integrity impact is scored higher here than availability alone would suggest.
Who can reach it
Network: an authenticated user or collector able to push an analytics sensor configuration through the device's gNMI listener.
What to do
Upgrade to the Junos OS Evolved release in JSA112250; the upgrade requires a device reboot. Until then, limit gNMI access to the telemetry collector and treat the ability to define sensor resources as a privileged operation. Fixed versions are not stated in this record.
References
Related entries
- Lenovo XClarity Integrator for Windows Admin Center (PowerShell command injection): PowerShell command injectionCVE-2026-14371 · Lenovo XClarity Integrator for Windows Admin Center (PowerShell command injection)High
- OpenBMC phosphor-net-ipmid: session authorization can be swapped to another account without re-authenticatingCVE-2026-16140 · OpenBMC phosphor-net-ipmid (IPMI 2.0 RAKP session authorization)High
- Lenovo XClarity Orchestrator (OS command injection): An authenticated attacker executes arbitrary OS commandsCVE-2026-16793 · Lenovo XClarity Orchestrator (OS command injection)High
- Eaton Tripp Lite series PADM firmware, session management interface: A low-privilege authenticated user escalatesCVE-2026-22622 · Eaton Tripp Lite series PADM firmware, session management interfaceHigh
- NVIDIA UFM Enterprise: web interface authorization flaw leads to code execution on the fabric managerCVE-2026-24170 · NVIDIA UFM Enterprise (web interface authorization)High
- AMD Zen 2 op cache: shared resources are not properly isolated, corrupting instructionsCVE-2026-46174 · AMD Zen 2 op cache (shared-resource isolation; Linux x86/CPU/AMD fix)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.