Skip to contentJuniper Networks vulnerabilities
Newest
- juniper junos, junos os +1 moreJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary filesCVE-2023-36851In KEV5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)CVE-2023-4481EPSS 18.4%7.5 High
- juniper junos, junos os +1 moreJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesCVE-2023-36846In KEVPublic exploitEPSS 93.5%5.3 Medium
- juniper junos, junos os +1 moreJunos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variableCVE-2023-36845In KEVPublic exploitEPSS 95.1%9.8 Critical
- juniper junos, junos os +1 moreJunos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variablesCVE-2023-36844In KEVPublic exploitEPSS 90.0%5.3 Medium
- juniper junos, junos os +1 moreJunos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesCVE-2023-36847In KEVEPSS 83.5%5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.CVE-2023-368506.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is receivedCVE-2023-368496.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The FPC will crash on receiving a malformed CFM packetCVE-2023-368486.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is runCVE-2023-368405.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executedCVE-2023-368364.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnelCVE-2023-368357.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoSCVE-2023-368346.5 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flapsCVE-2023-368336.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is receivedCVE-2023-289857.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core occurs when running a low privileged CLI commandCVE-2023-368385.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interfaceCVE-2023-368327.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is appliedCVE-2023-368317.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 more2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attributeCVE-2023-00267.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and agedCVE-2023-289845.3 Medium
- juniper junos os evolvedJunos OS Evolved: Shell Injection vulnerability in the gNOI serverCVE-2023-289838.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occurCVE-2023-289827.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crashCVE-2023-289816.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issuedCVE-2023-289805.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check failsCVE-2023-289794.7 Medium
- juniper junos os evolvedJunos OS Evolved: Read access to some confidential user information is possibleCVE-2023-289785.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crashCVE-2023-289767.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: The kernel will crash when certain USB devices are insertedCVE-2023-289754.6 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crashCVE-2023-289747.4 High
- juniper junos os evolvedJunos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actionsCVE-2023-289737.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: 'set system ports console insecure' allows root password recoveryCVE-2023-289726.8 Medium
- juniper paragon active assuranceParagon Active Assurance: Enabling the timescaledb enables IP forwardingCVE-2023-289717.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: JRR200: Kernel crash upon receipt of a specific packetCVE-2023-289706.5 Medium
- juniper jdpi-decoder engine, junos, juniper networks junos os +1 more +3 moreJunos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail openCVE-2023-289685.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crashCVE-2023-289677.5 High
- juniper junos os evolvedJunos OS Evolved: Local low-privileged user with shell access can execute CLI commands as rootCVE-2023-289667.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002: Failure of storm control feature may lead to Denial of ServiceCVE-2023-289656.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crashCVE-2023-289647.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: User-controlled input vulnerability in J-WebCVE-2023-289635.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Unauthenticated access vulnerability in J-WebCVE-2023-289625.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is usedCVE-2023-289615.8 Medium
- juniper junos os evolvedJunos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containersCVE-2023-289608.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packetsCVE-2023-289596.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is receivedCVE-2023-16976.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crashCVE-2023-224177.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is receivedCVE-2023-224167.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are receivedCVE-2023-224157.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processedCVE-2023-224146.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packetsCVE-2023-224137.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processedCVE-2023-224127.5 High
- Show moreLoading…