Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-21590Junos OS: An local attacker with shell access can execute arbitrary code
- CVE-2024-39564Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash
- CVE-2025-21598Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash
- CVE-2025-21600Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash
- CVE-2025-21602Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash
- CVE-2025-21599Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service
- CVE-2025-21596Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash
- CVE-2025-21593Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash
- CVE-2025-21592Junos OS: SRX Series: Low privileged user able to access highly sensitive information on file system
- CVE-2024-47507Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted
- CVE-2024-47506Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash
- CVE-2024-47509Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3
- CVE-2024-47508Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2
- CVE-2024-47505Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1
- CVE-2024-47504Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash
- CVE-2024-47503Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash
- CVE-2024-47502Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS
- CVE-2024-47501Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash
- CVE-2024-47499Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash
- CVE-2024-47498Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect
- CVE-2024-47497Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion
- CVE-2024-47496Junos OS: MX Series: The PFE will crash on running specific command
- CVE-2024-47495Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.
- CVE-2024-47494Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset
- CVE-2024-47493Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash
- CVE-2024-47491Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash
- CVE-2024-47490Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted
- CVE-2024-47489Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE
- CVE-2024-39563Junos Space: Remote Command Execution (RCE) vulnerability in web application
- CVE-2024-39547Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization