Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1611Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.
- CVE-2020-1609Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.
- CVE-2020-1608Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service
- CVE-2020-1607Junos OS: Cross-Site Scripting (XSS) in J-Web
- CVE-2020-1606Junos OS: Path traversal vulnerability in J-Web
- CVE-2020-1605Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.
- CVE-2020-1604Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets
- CVE-2020-1603Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.
- CVE-2020-1602Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.
- CVE-2020-1601Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.
- CVE-2020-1600Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.
- CVE-2019-0075Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM
- CVE-2019-0074Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.
- CVE-2019-0073Junos OS: PKI key pairs are exported with insecure file permissions
- CVE-2019-0072SBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.
- CVE-2019-0071Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS
- CVE-2019-0070Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.
- CVE-2019-0069Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text
- CVE-2019-0068Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets
- CVE-2019-0067Junos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devices configured with Multi-Chassis Link Aggregation Group (MC-LAG)
- CVE-2019-0066Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core
- CVE-2019-0065Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC
- CVE-2019-0064Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet
- CVE-2019-0063Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message
- CVE-2019-0062Junos OS: Session fixation vulnerability in J-Web
- CVE-2019-0061Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation
- CVE-2019-0060Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets
- CVE-2019-0059Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.
- CVE-2019-0058Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.
- CVE-2019-0057NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.