Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-0214Junos OS: Denial of Service in ppmd upon receipt of malformed packet
- CVE-2021-0223Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries
- CVE-2021-0222Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.
- CVE-2021-0221Junos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic
- CVE-2021-0220Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI
- CVE-2021-0219Junos OS: Command injection vulnerability in 'request system software' CLI command
- CVE-2021-0218Junos OS: Command injection vulnerability in license-check daemon
- CVE-2021-0217Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets
- CVE-2021-0215Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps
- CVE-2021-0212Contrail Networking: Administrator credentials are exposed in a plaintext file
- CVE-2021-0211Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.
- CVE-2021-0210Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session
- CVE-2021-0209Junos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.
- CVE-2021-0208Junos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.
- CVE-2021-0207NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.
- CVE-2021-0206Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.
- CVE-2021-0205Junos OS: MX Series: Dynamic filter fails to match IPv6 prefix
- CVE-2021-0204Junos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries
- CVE-2021-0203Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured
- CVE-2021-0202Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain
- CVE-2020-1689Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames when deployed in a Virtual Chassis configuration
- CVE-2020-1688Junos OS: SRX and NFX Series: Insufficient Web API private key protection
- CVE-2020-1687Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.
- CVE-2020-1686Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.
- CVE-2020-1685Junos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard action
- CVE-2020-1684Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.
- CVE-2020-1683Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling
- CVE-2020-1682Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command
- CVE-2020-1681Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service
- CVE-2020-1680Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.