Skip to contentJuniper vulnerabilities
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the serviceCVE-2021-313847.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.CVE-2021-313837.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfacesCVE-2021-313826.5 Medium
- juniper networks src series, juniper session and resource control +1 moreSRC Series: A remote attacker sending a specially crafted query may cause the web server to delete filesCVE-2021-313816.5 Medium
- juniper networks src series, juniper session and resource control +1 moreSRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive informationCVE-2021-313805.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.CVE-2021-313797.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.CVE-2021-313786.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A local authenticated attacker can cause RPD to coreCVE-2021-313775.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packetsCVE-2021-313767.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassedCVE-2021-313757.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.CVE-2021-313747.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Persistent XSS vulnerability in J-WebCVE-2021-313738.0 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.CVE-2021-313728.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces.CVE-2021-313715.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is receivedCVE-2021-313706.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoSCVE-2021-313695.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of trafficCVE-2021-313687.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crashCVE-2021-313676.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoSCVE-2021-313666.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 framesCVE-2021-313656.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is receivedCVE-2021-313645.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of ServiceCVE-2021-313636.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoSCVE-2021-313626.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulatedCVE-2021-313615.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Denial of Service vulnerability in local file processingCVE-2021-313607.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Local Privilege Escalation vulnerabilityCVE-2021-313597.8 High
- juniper junos os evolvedJunos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper scriptCVE-2021-313587.8 High
- juniper junos os evolvedJunos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper scriptCVE-2021-313577.8 High
- juniper junos os evolvedJunos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scriptsCVE-2021-313567.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portalCVE-2021-313558.0 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)CVE-2021-313547.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of specific BGP updateCVE-2021-313537.5 High
- juniper networks src series, juniper session and resource control +1 moreSRC Series: NETCONF over SSH allows negotiation of weak ciphersCVE-2021-313525.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card resetCVE-2021-313517.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)CVE-2021-313507.5 High
- juniper networks 128 technology session smart router, juniper 128 technology session smart router firmware +1 moreSession Smart Router: Authentication Bypass VulnerabilityCVE-2021-313499.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packetCVE-2021-02997.5 High
- juniper junos os evolvedJunos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditionsCVE-2021-02984.7 Medium
- juniper junos os evolvedJunos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authenticationCVE-2021-02976.5 Medium
- juniper ctpviewCTPView: HSTS not being enforced on CTPView server.CVE-2021-02967.4 High
- juniper libslaxAn issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a heap-based...CVE-2021-395338.8 High
- juniper libslaxAn issue was discovered in libslax through v0.22.1. slaxIsCommentStart() in slaxlexer.c has a...CVE-2021-395348.8 High
- juniper libslaxAn issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a stack-based...CVE-2021-395318.8 High
- juniper libslaxAn issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the...CVE-2021-395326.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)CVE-2021-02847.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.CVE-2021-02956.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of ServiceCVE-2021-02945.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedlyCVE-2021-02935.5 Medium
- juniper junos os evolvedJunos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)CVE-2021-02926.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of ServiceCVE-2021-02916.5 Medium
- Show moreLoading…