Juniper DoS and RCE (affected service runs as root)

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11147

If you don’t have ACLs to protect your IP interfaces then you should implement those and/or patch your affected devices before the exploit is being used in the wild.