Skip to contentJuniper Networks vulnerabilities
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the deviceCVE-2023-224117.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.CVE-2023-224107.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will rebootCVE-2023-224095.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crashCVE-2023-224087.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected routerCVE-2023-224076.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPFCVE-2023-224066.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device rebootCVE-2023-224056.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is receivedCVE-2023-224046.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific trafficCVE-2023-224037.5 High
- juniper junos os evolvedJunos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flapsCVE-2023-224025.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crashCVE-2023-224017.5 High
- juniper junos os evolvedJunos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crashCVE-2023-224007.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabledCVE-2023-223997.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPsCVE-2023-223985.3 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of ServiceCVE-2023-223976.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)CVE-2023-223967.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivityCVE-2023-223956.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP callsCVE-2023-223947.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hopCVE-2023-223937.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)CVE-2023-223917.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1CVE-2022-221847.5 High
- juniper junos, juniper networks junos os +1 morecSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privilegesCVE-2022-222517.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remoteCVE-2022-222506.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainCVE-2022-222496.5 Medium
- juniper junos os evolvedJunos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commandsCVE-2022-222487.3 High
- juniper junos os evolvedJunos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)CVE-2022-222477.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PHP file inclusion vulnerability in J-WebCVE-2022-222467.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Path traversal vulnerability in J-WebCVE-2022-222454.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Unauthenticated XPath Injection vulnerability in J-WebCVE-2022-222445.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: XPath Injection vulnerability in J-WebCVE-2022-222434.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Cross-site Scripting (XSS) vulnerability in J-WebCVE-2022-222426.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Vulnerability in J-Web may allow deserialization without authenticationCVE-2022-222418.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenarioCVE-2022-222405.5 Medium
- juniper junos os evolvedJunos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalationCVE-2022-222398.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processedCVE-2022-222385.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locallyCVE-2022-222376.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crashCVE-2022-222367.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processedCVE-2022-222355.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busyCVE-2022-222345.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashCVE-2022-222335.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crashCVE-2022-222327.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashCVE-2022-222317.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAsCVE-2022-222306.5 Medium
- juniper networks paragon active assurance (formerly netrounds), juniper paragon active assurance control center +1 moreParagon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administrationCVE-2022-222298.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packetCVE-2022-222287.5 High
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilizationCVE-2022-222275.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crashCVE-2022-222266.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crashCVE-2022-222255.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLVCVE-2022-222246.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.CVE-2022-222236.5 Medium
- Show moreLoading…