Skip to contentJuniper Networks Junos vulnerabilities
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel panic upon receipt of specific TCPv6 packet on management interfaceCVE-2021-02585.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interfaceCVE-2021-02576.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: mosquitto Local Privilege Escalation vulnerability in SUID binariesCVE-2021-02565.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binariesCVE-2021-02555.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Remote code execution vulnerability in overlayd serviceCVE-2021-02549.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege EscalationCVE-2021-02537.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege EscalationCVE-2021-02527.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packetsCVE-2021-02518.6 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPDCVE-2021-02507.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.CVE-2021-02498.1 High
- juniper junos, juniper networks junos os +1 moreNFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.CVE-2021-024810.0 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.CVE-2021-02475.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other te…CVE-2021-02467.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.CVE-2021-02457.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service conditionCVE-2021-02447.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: Stateless firewall policer fails to discard trafficCVE-2021-02434.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configuredCVE-2021-02426.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restartCVE-2021-02417.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.CVE-2021-02407.4 High
- juniper junos os evolvedJunos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.CVE-2021-02396.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk spaceCVE-2021-02385.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configurationCVE-2021-02376.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.CVE-2021-02366.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting…CVE-2021-02357.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5100-96S: DDoS protection does not work as expected.CVE-2021-02345.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.CVE-2021-02337.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.CVE-2021-02316.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statisticsCVE-2021-02307.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of specific packets could lead to Denial of Service in MQTT ServerCVE-2021-02295.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deploymentCVE-2021-02286.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packetsCVE-2021-02277.5 High
- juniper junos os evolvedJunos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packetCVE-2021-02267.1 High
- juniper junos os evolvedJunos OS Evolved: Stateless IP firewall filter does not work as expectedCVE-2021-02255.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ANCPD core when hitting maximum-discovery-table-entries limitCVE-2021-02246.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packetsCVE-2021-02166.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service in ppmd upon receipt of malformed packetCVE-2021-02146.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binariesCVE-2021-02237.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.CVE-2021-02227.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast trafficCVE-2021-02216.5 Medium
- juniper junos spaceJunos Space: Shared secrets stored in recoverable format and directly exposed through the UICVE-2021-02206.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Command injection vulnerability in 'request system software' CLI commandCVE-2021-02196.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Command injection vulnerability in license-check daemonCVE-2021-02187.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packetsCVE-2021-02177.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flapsCVE-2021-02156.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.CVE-2021-021110.0 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active sessionCVE-2021-02106.8 Medium
- juniper junos os evolvedJunos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.CVE-2021-02096.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.CVE-2021-02088.8 High
- juniper junos, juniper networks junos os +1 moreNFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.CVE-2021-02077.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.CVE-2021-02067.5 High
- Show moreLoading…