Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-30397Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process
- CVE-2024-30391Junos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed
- CVE-2024-30390Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced
- CVE-2024-30389Junos OS: EX4300 Series: Firewall filter not blocking egress traffic
- CVE-2024-30386Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash
- CVE-2024-30384Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur
- CVE-2024-30382Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured
- CVE-2024-30387Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash
- CVE-2024-30388Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps
- CVE-2024-30392Junos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occurs
- CVE-2024-30394Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash
- CVE-2024-30395Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash
- CVE-2024-30405Junos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service
- CVE-2024-30406Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials
- CVE-2024-30407[Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks
- CVE-2024-30409Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).
- CVE-2024-30410Junos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term.
- CVE-2024-30381Paragon Active Assurance: probe_serviced exposes internal objects to local users
- CVE-2024-21618Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes
- CVE-2024-21615Junos OS and Junos OS Evolved: A low-privileged user can access confidential information
- CVE-2024-21610Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck
- CVE-2024-21609Junos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak
- CVE-2024-21605Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload
- CVE-2024-21598Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash
- CVE-2024-21593Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash
- CVE-2024-21590Junos OS Evolved: Packets which are not destined to the device can reach the RE
- CVE-2024-21620Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS
- CVE-2024-21619Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information
- CVE-2024-21617Junos OS: BGP flap on NSR-enabled devices causes memory leak
- CVE-2024-21616Junos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail