Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-39524Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- CVE-2024-39523Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- CVE-2024-39522Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- CVE-2024-39521Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- CVE-2024-39520Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- CVE-2024-39519Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario
- CVE-2024-39518Junos OS: MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry Interface
- CVE-2024-39517Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured
- CVE-2024-39514Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash
- CVE-2024-39513Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager
- CVE-2024-39512Junos OS Evolved: User is not logged out when the console cable is disconnected
- CVE-2024-39511Junos OS: The 802.1X Authentication Daemon crashes on running a specific command
- CVE-2024-39565Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device.
- CVE-2024-39562Junos OS Evolved: A high rate of SSH connections causes a Denial of Service
- CVE-2024-39561Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path
- CVE-2024-39560Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash
- CVE-2024-39559Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR enabled
- CVE-2024-39558Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR
- CVE-2024-39557Junos OS Evolved: MAC table changes cause a memory leak
- CVE-2024-39556Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow
- CVE-2024-39555Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset
- CVE-2024-39554Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash
- CVE-2024-21586Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash
- CVE-2024-2973Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed
- CVE-2024-30380Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV
- CVE-2024-30378Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands
- CVE-2024-30403Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes
- CVE-2024-30402Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription
- CVE-2024-30401Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman
- CVE-2024-30398Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash