Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-0252Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation
- CVE-2021-0251Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets
- CVE-2021-0250Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD
- CVE-2021-0249Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.
- CVE-2021-0248NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.
- CVE-2021-0247Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.
- CVE-2021-0246Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.
- CVE-2021-0245Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.
- CVE-2021-0244Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition
- CVE-2021-0243Junos OS: EX4300: Stateless firewall policer fails to discard traffic
- CVE-2021-0242Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured
- CVE-2021-0241Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart
- CVE-2021-0240Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.
- CVE-2021-0239Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.
- CVE-2021-0238Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space
- CVE-2021-0237Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration
- CVE-2021-0236Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.
- CVE-2021-0235Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks
- CVE-2021-0234Junos OS: QFX5100-96S: DDoS protection does not work as expected.
- CVE-2021-0233Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.
- CVE-2021-0232Paragon Active Assurance: Authentication bypass vulnerability in Control Center
- CVE-2021-0231Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.
- CVE-2021-0230Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics
- CVE-2021-0229Junos OS: Receipt of specific packets could lead to Denial of Service in MQTT Server
- CVE-2021-0228Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment
- CVE-2021-0227Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets
- CVE-2021-0226Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet
- CVE-2021-0225Junos OS Evolved: Stateless IP firewall filter does not work as expected
- CVE-2021-0224Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit
- CVE-2021-0216Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets