Skip to contentJuniper vulnerabilities
Newest
- juniper junos, junos os +1 moreJunos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) processCVE-2024-303978.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performedCVE-2024-303916.3 Medium
- juniper junos os evolvedJunos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforcedCVE-2024-303906.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: Firewall filter not blocking egress trafficCVE-2024-303896.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crashCVE-2024-303867.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occurCVE-2024-303846.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configuredCVE-2024-303828.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crashCVE-2024-303877.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flapsCVE-2024-303887.1 High
- juniper junos, junos os +1 moreJunos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occursCVE-2024-303928.7 High
- juniper junos, junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crashCVE-2024-303948.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crashCVE-2024-303958.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of ServiceCVE-2024-304058.7 High
- juniper junos os evolved, paragon active assurance test agent +1 moreJunos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentialsCVE-2024-304066.7 Medium
- juniper cloud native router, crpd, juniper networks, inc. cloud native router (jcnr) +2 more[Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacksCVE-2024-304079.2 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).CVE-2024-304096.9 Medium
- juniper junosJunos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term.CVE-2024-304106.9 Medium
- juniper paragon active assurance control center, juniper networks paragon active assurance +1 moreParagon Active Assurance: probe_serviced exposes internal objects to local usersCVE-2024-303818.4 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashesCVE-2024-216187.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A low-privileged user can access confidential informationCVE-2024-216155.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuckCVE-2024-216105.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leakCVE-2024-216097.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 300 Series: Specific link local traffic causes a control plane overloadCVE-2024-216057.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crashCVE-2024-215988.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crashCVE-2024-215937.1 High
- juniper junos os evolvedJunos OS Evolved: Packets which are not destined to the device can reach the RECVE-2024-215907.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSSCVE-2024-216208.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive informationCVE-2024-216195.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: BGP flap on NSR-enabled devices causes memory leakCVE-2024-216176.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to failCVE-2024-216167.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific query via DREND causes rpd crashCVE-2024-216147.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crashCVE-2024-216136.5 Medium
- juniper junos os evolvedJunos OS Evolved: Specific TCP traffic causes OFP core and restart of RECVE-2024-216127.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crashCVE-2024-216117.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejectedCVE-2024-216075.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crashCVE-2024-216067.5 High
- juniper junos os evolvedJunos OS Evolved: A high rate of specific traffic will cause a complete system outageCVE-2024-216047.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crashCVE-2024-216036.5 Medium
- juniper junos os evolvedJunos OS Evolved: ACX7024, ACX7100-32C and ACX7100-48L: Traffic stops when a specific IPv4 UDP packet is received by the RECVE-2024-216027.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Due to an error in processing TCP events flowd will crashCVE-2024-216015.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge conditionCVE-2024-216006.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MPC3E memory leak with PTP configurationCVE-2024-215996.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filtersCVE-2024-215975.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devicesCVE-2024-215965.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hangCVE-2024-215957.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crashCVE-2024-215945.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code ExecutionCVE-2024-21591EPSS 17.7%9.8 Critical
- juniper paragon active assurance control center, juniper networks paragon active assurance +1 moreParagon Active Assurance Control Center: Information disclosure vulnerabilityCVE-2024-215897.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabledCVE-2024-215876.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crashCVE-2024-215855.9 Medium
- Show moreLoading…