Skip to contentJuniper Networks Junos Os vulnerabilities
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKICVE-2021-02815.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding EngineCVE-2021-02807.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.CVE-2021-02788.8 High
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpdCVE-2021-02778.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.CVE-2021-02758.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.CVE-2021-02735.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.CVE-2021-02726.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attack…CVE-2021-02716.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deploymentCVE-2021-02707.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.CVE-2021-02698.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.CVE-2021-02688.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.CVE-2021-02677.4 High
- juniper junos, juniper networks junos os +1 morecSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.CVE-2021-02668.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configuredCVE-2021-02645.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabledCVE-2021-02635.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002-60C: Use after free vulnerability found during static code analysisCVE-2021-02626.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requestsCVE-2021-02617.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.CVE-2021-02607.3 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenarioCVE-2021-02597.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel panic upon receipt of specific TCPv6 packet on management interfaceCVE-2021-02585.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interfaceCVE-2021-02576.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: mosquitto Local Privilege Escalation vulnerability in SUID binariesCVE-2021-02565.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binariesCVE-2021-02555.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Remote code execution vulnerability in overlayd serviceCVE-2021-02549.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege EscalationCVE-2021-02537.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege EscalationCVE-2021-02527.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packetsCVE-2021-02518.6 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPDCVE-2021-02507.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.CVE-2021-02498.1 High
- juniper junos, juniper networks junos os +1 moreNFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.CVE-2021-024810.0 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.CVE-2021-02475.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other te…CVE-2021-02467.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.CVE-2021-02457.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service conditionCVE-2021-02447.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: Stateless firewall policer fails to discard trafficCVE-2021-02434.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configuredCVE-2021-02426.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restartCVE-2021-02417.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.CVE-2021-02407.4 High
- juniper junos os evolvedJunos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.CVE-2021-02396.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk spaceCVE-2021-02385.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configurationCVE-2021-02376.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.CVE-2021-02366.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting…CVE-2021-02357.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5100-96S: DDoS protection does not work as expected.CVE-2021-02345.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.CVE-2021-02337.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.CVE-2021-02316.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statisticsCVE-2021-02307.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of specific packets could lead to Denial of Service in MQTT ServerCVE-2021-02295.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deploymentCVE-2021-02286.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packetsCVE-2021-02277.5 High
- Show moreLoading…