The vulnerability is an improper neutralization of special elements in output used by a downstream component (CWE-74) that allows an attacker to inject arbitrary HTTP headers through unsanitized request body parameters. This can lead to HTTP response splitting, enabling the attacker to modify or split server responses, potentially causing session hijacking, web cache poisoning, or malicious content injection.

Juniper Networks' Session Smart Router and Session Smart Conductor products are affected. Versions prior to 7.0.5 on the 7.0 branch, prior to 7.1.7 on the 7.1 branch, and prior to 7.2.3 on the 7.2 branch are vulnerable. All releases 7.0.5 and later, 7.1.7 and later, and 7.2.3 and later contain the fix.

The CVSS score of 5.8 indicates a moderate severity, and while EPSS data is not available, the lack of a KEV listing suggests the vulnerability is not confirmed as currently exploited in the wild. The attack path requires remote access to the device's web management interface and the ability to send crafted request bodies; there are no known workarounds, so the only effective defense is to patch the software.