Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-31362Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS
- CVE-2021-31361Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated
- CVE-2021-31360Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing
- CVE-2021-31359Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability
- CVE-2021-31358Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script
- CVE-2021-31357Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script
- CVE-2021-31356Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts
- CVE-2021-31355Junos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal
- CVE-2021-31354Junos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)
- CVE-2021-31353Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update
- CVE-2021-31352SRC Series: NETCONF over SSH allows negotiation of weak ciphers
- CVE-2021-31351Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset
- CVE-2021-31350Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)
- CVE-2021-31349Session Smart Router: Authentication Bypass Vulnerability
- CVE-2021-0299Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet
- CVE-2021-0298Junos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions
- CVE-2021-0297Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication
- CVE-2021-0296CTPView: HSTS not being enforced on CTPView server.
- CVE-2021-0284Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)
- CVE-2021-0295Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.
- CVE-2021-0294Junos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of Service
- CVE-2021-0293Junos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedly
- CVE-2021-0292Junos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)
- CVE-2021-0291Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service
- CVE-2021-0290Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames
- CVE-2021-0289Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted
- CVE-2021-0288Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs
- CVE-2021-0287Junos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network
- CVE-2021-0286Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart
- CVE-2021-0285Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic