The vulnerability is an injection flaw in the Ember service of Juniper's Session Smart Router and Session Smart Conductor. Created with specially crafted directory names, a local attacker can trigger the service cleanup routine to unmount any filesystem that the device mounts. If an attacker successfully unmounts critical components, the device may lose access to users, applications, or data, effectively causing a denial of service.

Affected are Juniper Networks Session Smart Conductor and Session Smart Router. The fix is released in software versions 7.0.5 and later, 7.1.7 and later, and 7.2.3 and later. Devices running older releases are vulnerable.

The CVSS base score of 5.5 indicates a moderate impact. The EPSS score is not available and the vulnerability is not listed in CISA KEV. Attackers require local access to the device, but once access is achieved they can exploit the flaw by creating malicious directories and triggering a restart. The lack of a public workaround means patches are the only reliable protection.