Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-52955Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart
- CVE-2025-52954Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system
- CVE-2025-52951Junos OS: IPv6 firewall filter fails to match payload-protocol
- CVE-2025-52950Juniper Security Director: Insufficient authorization for multiple endpoints in web interface
- CVE-2025-52949Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash
- CVE-2025-52948Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled
- CVE-2025-52947Junos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash
- CVE-2025-52946Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash
- CVE-2025-30661Junos OS: Low-privileged user can cause script to run as root, leading to privilege escalation
- CVE-2025-30660Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset
- CVE-2025-30659Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic
- CVE-2025-30658Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop
- CVE-2025-30657Junos OS: Processing of a specific BGP update causes the SRRD process to crash
- CVE-2025-30656Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crash
- CVE-2025-30655Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled
- CVE-2025-30654Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information
- CVE-2025-30653Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash
- CVE-2025-30652Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash
- CVE-2025-30651Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash
- CVE-2025-30649Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.
- CVE-2025-30648Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash
- CVE-2025-30647Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak
- CVE-2025-30646Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash
- CVE-2025-30645Junos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crash
- CVE-2025-30644Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled
- CVE-2025-21601Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device
- CVE-2025-21597Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed
- CVE-2025-21595Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash
- CVE-2025-21594Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block
- CVE-2025-21591Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash