An SQL injection flaw in the ipfd component of Juniper Networks Junos OS SRX Series allows an unauthenticated network-based attacker to execute root-privileged code via a configured Security Intelligence feed connection, effectively giving full control over the device. The weakness is catalogued as CWE-89. Based on the description, it is inferred that the vulnerability is exploited through the device’s Security Intelligence feed interface, which expects remote input.

Devices running Juniper Networks Junos OS SRX Series are affected, specifically the releases 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1, and all subsequent releases. Versions not listed are assumed unaffected until additional information is released—this inference is made from the advisory’s note that only these releases are impacted.

The CVSS score of 9.2 indicates critical severity, and the EPSS score of < 1% indicates a very low, but non-zero exploitation probability. The vulnerability is not listed in CISA’s KEV catalog. The attacker does not need prior authentication; they must reach the device’s Security Intelligence feed service from the network. Based on the description, it is inferred that the attack vector is a remote network-based request to the ipfd interface, which processes external data. Given the high severity and lack of mitigations by default, the risk is substantial for any SRX device that has the Security Intelligence feature enabled without the required tls-profile authentication.