Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-22190Paragon Active Assurance Control Center: Information disclosure vulnerability in crafted URL
- CVE-2022-22189Contrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication
- CVE-2022-22188Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will cause a device to hang.
- CVE-2022-22187JIMS: Local Privilege Escalation vulnerability via repair functionality
- CVE-2022-22186Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded
- CVE-2022-22185Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet
- CVE-2022-22183Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.
- CVE-2022-22182Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session
- CVE-2022-22181Junos OS: J-Web can be compromised through reflected XSS attacks
- CVE-2022-22180Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets
- CVE-2022-22179Junos OS: jdhcpd crashes upon receiving a specific DHCP packet
- CVE-2022-22178Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received
- CVE-2022-22177Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.
- CVE-2022-22176Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet
- CVE-2022-22175Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed
- CVE-2022-22174Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets
- CVE-2022-22173Junos OS: CRL failing to download causes a memory leak and ultimately a DoS
- CVE-2022-22172Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS
- CVE-2022-22171Junos OS: Specific packets over VXLAN cause FPC reset
- CVE-2022-22170Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset
- CVE-2022-22169Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.
- CVE-2022-22168Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot
- CVE-2022-22167Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy
- CVE-2022-22166Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is received
- CVE-2022-22164Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.
- CVE-2022-22163Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet
- CVE-2022-22162Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in
- CVE-2022-22161Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic
- CVE-2022-22160Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message
- CVE-2022-22159Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).