Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-22157Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled
- CVE-2022-22156Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL
- CVE-2022-22155Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps
- CVE-2022-22154Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS
- CVE-2022-22153SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops
- CVE-2022-22152Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface
- CVE-2021-31386Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.
- CVE-2021-31385Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root
- CVE-2021-31384Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service
- CVE-2021-31383Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.
- CVE-2021-31382Junos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces
- CVE-2021-31381SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete files
- CVE-2021-31380SRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive information
- CVE-2021-31379Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.
- CVE-2021-31378Junos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.
- CVE-2021-31377Junos OS: A local authenticated attacker can cause RPD to core
- CVE-2021-31376Junos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packets
- CVE-2021-31375Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed
- CVE-2021-31374Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.
- CVE-2021-31373Junos OS: SRX Series: Persistent XSS vulnerability in J-Web
- CVE-2021-31372Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
- CVE-2021-31371Junos OS: QFX5000 Series: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces.
- CVE-2021-31370Junos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received
- CVE-2021-31369Junos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoS
- CVE-2021-31368Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic
- CVE-2021-31367Junos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash
- CVE-2021-31366Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS
- CVE-2021-31365Junos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames
- CVE-2021-31364Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received
- CVE-2021-31363Junos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of Service