Skip to contentJuniper Networks Junos vulnerabilities
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is receivedCVE-2021-313645.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of ServiceCVE-2021-313636.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoSCVE-2021-313626.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulatedCVE-2021-313615.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Denial of Service vulnerability in local file processingCVE-2021-313607.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Local Privilege Escalation vulnerabilityCVE-2021-313597.8 High
- juniper junos os evolvedJunos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper scriptCVE-2021-313587.8 High
- juniper junos os evolvedJunos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper scriptCVE-2021-313577.8 High
- juniper junos os evolvedJunos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scriptsCVE-2021-313567.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portalCVE-2021-313558.0 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)CVE-2021-313547.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of specific BGP updateCVE-2021-313537.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card resetCVE-2021-313517.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)CVE-2021-313507.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packetCVE-2021-02997.5 High
- juniper junos os evolvedJunos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditionsCVE-2021-02984.7 Medium
- juniper junos os evolvedJunos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authenticationCVE-2021-02976.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)CVE-2021-02847.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.CVE-2021-02956.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of ServiceCVE-2021-02945.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedlyCVE-2021-02935.5 Medium
- juniper junos os evolvedJunos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)CVE-2021-02926.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of ServiceCVE-2021-02916.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted framesCVE-2021-02906.5 Medium
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restartedCVE-2021-02896.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCsCVE-2021-02886.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the networkCVE-2021-02876.5 Medium
- juniper junos os evolvedJunos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restartCVE-2021-02867.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact trafficCVE-2021-02857.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)CVE-2021-02837.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabledCVE-2021-02827.5 High
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKICVE-2021-02815.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding EngineCVE-2021-02807.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.CVE-2021-02788.8 High
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpdCVE-2021-02778.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.CVE-2021-02758.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.CVE-2021-02735.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.CVE-2021-02726.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attack…CVE-2021-02716.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deploymentCVE-2021-02707.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.CVE-2021-02698.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.CVE-2021-02688.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.CVE-2021-02677.4 High
- juniper junos, juniper networks junos os +1 morecSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.CVE-2021-02668.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configuredCVE-2021-02645.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabledCVE-2021-02635.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002-60C: Use after free vulnerability found during static code analysisCVE-2021-02626.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requestsCVE-2021-02617.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.CVE-2021-02607.3 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenarioCVE-2021-02597.4 High
- Show moreLoading…