Skip to contentJuniper Networks vulnerabilities
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC rebootCVE-2022-221686.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policyCVE-2022-221677.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is receivedCVE-2022-221666.5 Medium
- juniper junos os evolvedJunos OS Evolved: Telnet service may be enabled when it is expected to be disabled.CVE-2022-221646.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packetCVE-2022-221637.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged inCVE-2022-221627.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of trafficCVE-2022-221617.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific messageCVE-2022-221606.5 Medium
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).CVE-2022-221597.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabledCVE-2022-221577.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URLCVE-2022-221566.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX5448: FPC memory leak due to IPv6 neighbor flapsCVE-2022-221556.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoSCVE-2022-221546.8 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet dropsCVE-2022-221537.5 High
- juniper contrail service orchestrationContrail Service Orchestration: Tenants able to see other tenants policies via REST API interfaceCVE-2022-221527.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.CVE-2021-313865.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to rootCVE-2021-313858.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the serviceCVE-2021-313847.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.CVE-2021-313837.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfacesCVE-2021-313826.5 Medium
- juniper networks src series, juniper session and resource control +1 moreSRC Series: A remote attacker sending a specially crafted query may cause the web server to delete filesCVE-2021-313816.5 Medium
- juniper networks src series, juniper session and resource control +1 moreSRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive informationCVE-2021-313805.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.CVE-2021-313797.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.CVE-2021-313786.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A local authenticated attacker can cause RPD to coreCVE-2021-313775.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packetsCVE-2021-313767.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassedCVE-2021-313757.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.CVE-2021-313747.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Persistent XSS vulnerability in J-WebCVE-2021-313738.0 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.CVE-2021-313728.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces.CVE-2021-313715.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is receivedCVE-2021-313706.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoSCVE-2021-313695.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of trafficCVE-2021-313687.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crashCVE-2021-313676.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoSCVE-2021-313666.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 framesCVE-2021-313656.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is receivedCVE-2021-313645.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of ServiceCVE-2021-313636.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoSCVE-2021-313626.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulatedCVE-2021-313615.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Denial of Service vulnerability in local file processingCVE-2021-313607.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Local Privilege Escalation vulnerabilityCVE-2021-313597.8 High
- juniper junos os evolvedJunos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper scriptCVE-2021-313587.8 High
- juniper junos os evolvedJunos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper scriptCVE-2021-313577.8 High
- juniper junos os evolvedJunos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scriptsCVE-2021-313567.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portalCVE-2021-313558.0 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)CVE-2021-313547.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of specific BGP updateCVE-2021-313537.5 High
- juniper networks src series, juniper session and resource control +1 moreSRC Series: NETCONF over SSH allows negotiation of weak ciphersCVE-2021-313525.3 Medium
- Show moreLoading…