Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1645Junos OS: MX Series: Services card might restart when DNS filtering is enabled
- CVE-2020-1644Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets
- CVE-2020-1643Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured
- CVE-2020-1641Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.
- CVE-2020-1640Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.
- CVE-2020-1631Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services
- CVE-2020-1632Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.
- CVE-2020-1633Junos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service
- CVE-2020-1639Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.
- CVE-2020-1638Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.
- CVE-2020-1637Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability
- CVE-2020-1634Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.
- CVE-2020-1630Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.
- CVE-2020-1629Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.
- CVE-2020-1628Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces
- CVE-2020-1627Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing
- CVE-2020-1626Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets
- CVE-2020-1625Junos OS: Kernel memory leak in virtual-memory due to interface flaps
- CVE-2020-1624Junos OS Evolved: objmon logs may leak sensitive information
- CVE-2020-1623Junos OS Evolved: ev.ops file may leak sensitive information
- CVE-2020-1622Junos OS Evolved: EvoSharedObjStore may leak sensitive information
- CVE-2020-1621Junos OS Evolved: Configd leaks hashes via stream and is world readable
- CVE-2020-1620Junos OS Evolved: Configd leaks hashes via log file and is world readable
- CVE-2020-1619Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.
- CVE-2020-1618Junos OS: EX and QFX Series: Console port authentication bypass vulnerability
- CVE-2020-1617Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.
- CVE-2020-1616JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service.
- CVE-2020-1615Junos OS: vMX: Default credentials supplied in vMX configuration
- CVE-2020-1614NFX250 Series: Hardcoded credentials in the vSRX VNF instance.
- CVE-2020-1613Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.