By 3:15 AM, it was done. The probes from Belarus were still knocking, but now the routers simply ignored the malformed packets.
Earlier that week, a threat intel alert had landed in his inbox like a grenade. A critical vulnerability in Juniper’s JunOS—a remote code execution flaw that made their edge routers as porous as a sieve. The patch notes were clear: “Malformed BGP update packet can trigger a heap overflow.”
But this wasn’t about a new feature. It was about the CVE.
There it was. A tiny, unsigned junos-srpcopy-patch.tgz file. No login required. A JTAC engineer had posted it as a hotfix for a specific customer case and forgotten to lock the directory.
Miles leaned back in his chair, the taste of stale coffee on his tongue. He hadn’t followed the rules. He hadn’t had the right contract. But he had the right hash, the right nerve, and a forgotten link in a forgotten forum.
“Enter your Support Contract Number.”