Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-44193Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run
- CVE-2023-44192Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP
- CVE-2023-44191Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging
- CVE-2023-44185Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet
- CVE-2023-44184Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command
- CVE-2023-44183Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.
- CVE-2023-44182Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations
- CVE-2023-44181Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment
- CVE-2023-44178Junos OS : Stack overflow vulnerability in CLI command processing
- CVE-2023-44176Junos OS : Stack overflow vulnerability in CLI command processing
- CVE-2023-44177Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing
- CVE-2023-44175Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash
- CVE-2023-36843Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled
- CVE-2023-36841Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service
- CVE-2023-36839Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received
- CVE-2023-22392Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak
- CVE-2023-44190Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability
- CVE-2023-44189Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability
- CVE-2023-44188Junos OS: jkdsd crash due to multiple telemetry requests
- CVE-2023-44187Junos OS Evolved: 'file copy' CLI command can disclose password to shell users
- CVE-2023-44186Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor
- CVE-2023-36851Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
- CVE-2023-4481Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)
- CVE-2023-36846Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
- CVE-2023-36845Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
- CVE-2023-36844Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
- CVE-2023-36847Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
- CVE-2023-36850Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.
- CVE-2023-36849Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received
- CVE-2023-36848Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet