Skip to contentJuniper Junos vulnerabilities
- juniper junos os evolvedJunos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and r…CVE-2025-599677.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restartCVE-2025-599648.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crashCVE-2025-599626.0 Medium
- juniper junos os evolvedJunos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RECVE-2025-599586.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoorCVE-2025-599577.0 High
- juniper junos os evolvedJunos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restartCVE-2025-529617.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crashCVE-2025-529608.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'CVE-2025-529888.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: J-Web can be exposed on additional interfacesCVE-2025-65496.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Annotate configuration command can be used to change the configurationCVE-2025-529896.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaksCVE-2025-529866.8 Medium
- juniper junos os evolvedJunos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matchingCVE-2025-529856.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashesCVE-2025-529848.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: After removing ssh public key authentication root can still log inCVE-2025-529838.6 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: When specific SIP packets are processed the MS-MPC will crashCVE-2025-529828.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Sequence of specific PIM packets causes a flowd crashCVE-2025-529818.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE messageCVE-2025-529808.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configuredCVE-2025-529647.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A low-privileged user can disable an interfaceCVE-2025-529636.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session resetCVE-2025-529537.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crashCVE-2025-529527.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crashCVE-2025-529586.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restartCVE-2025-529557.1 High
- juniper junos os evolvedJunos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the systemCVE-2025-529548.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: IPv6 firewall filter fails to match payload-protocolCVE-2025-529516.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crashCVE-2025-529497.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabledCVE-2025-529488.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crashCVE-2025-529477.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crashCVE-2025-529468.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Low-privileged user can cause script to run as root, leading to privilege escalationCVE-2025-306618.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Decapsulation of specific GRE packets leads to PFE resetCVE-2025-306608.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A device configured for vector routing crashes when receiving malformed trafficCVE-2025-306598.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stopCVE-2025-306588.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Processing of a specific BGP update causes the SRRD process to crashCVE-2025-306576.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crashCVE-2025-306568.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabledCVE-2025-306556.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A local, low privileged user can access sensitive informationCVE-2025-306546.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crashCVE-2025-306536.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crashCVE-2025-306526.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crashCVE-2025-306518.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.CVE-2025-306498.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crashCVE-2025-306487.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Subscriber login/logout activity will lead to a memory leakCVE-2025-306477.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crashCVE-2025-306467.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crashCVE-2025-306458.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabledCVE-2025-306447.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the deviceCVE-2025-216018.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observedCVE-2025-215976.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crashCVE-2025-215957.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port blockCVE-2025-215948.7 High
- Show moreLoading…