Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-0283Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)
- CVE-2021-0282Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled
- CVE-2021-0281Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI
- CVE-2021-0280Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine
- CVE-2021-0279Contrail Cloud: Hardcoded credentials for RabbitMQ service
- CVE-2021-0278Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
- CVE-2021-0277Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd
- CVE-2021-0276Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.
- CVE-2021-0275Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.
- CVE-2021-0273Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.
- CVE-2021-0272Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.
- CVE-2021-0271Junos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core.
- CVE-2021-0270Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment
- CVE-2021-0269Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.
- CVE-2021-0268Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.
- CVE-2021-0267Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.
- CVE-2021-0266cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.
- CVE-2021-0265Contrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root.
- CVE-2021-0264Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured
- CVE-2021-0263Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled
- CVE-2021-0262Junos OS: QFX10002-60C: Use after free vulnerability found during static code analysis
- CVE-2021-0261Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests
- CVE-2021-0260Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.
- CVE-2021-0259Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario
- CVE-2021-0258Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface
- CVE-2021-0257Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface
- CVE-2021-0256Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries
- CVE-2021-0255Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries
- CVE-2021-0254Junos OS: Remote code execution vulnerability in overlayd service
- CVE-2021-0253Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation