An Integer Overflow in the DPI certificate scanner allows an unauthenticated remote attacker to send a specifically crafted TLS server certificate that overflows internal counters or buffers, causing the Session Smart Router to crash. This leads to a denial of service at the router level, potentially disrupting network routing and connectivity for all clients attached to that device. The weakness is an arithmetic overflow (CWE‑190) and an integer overflow condition (CWE‑835).

The vulnerability affects Juniper Networks Session Smart Router firmware. Affected releases include 7.0.5 and later, 7.1.7 and later, and 7.2.3 and later. Earlier versions prior to these releases are not impacted.

The CVSS score of 7.5 represents a high severity DoS risk. Exploitation requires only network access to the router and no authentication, making it relatively straightforward for an attacker to trigger. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, but the absence of a KEV listing does not mitigate the risk of exploitation. Because there is no public workaround, the attack vector remains accessible until an official patch is applied.