Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-0056Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.
- CVE-2019-0055Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.
- CVE-2019-0054Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.
- CVE-2019-0051SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.
- CVE-2019-0050Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.
- CVE-2019-0047Junos OS: Persistent XSS vulnerability in J-Web
- CVE-2019-0053Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow
- CVE-2019-0052SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets
- CVE-2019-0049Junos OS: RPD process crashes when BGP peer restarts
- CVE-2019-0048EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail
- CVE-2019-0046Junos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.
- CVE-2019-0044Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface
- CVE-2019-0043Junos OS: RPD process crashes upon receipt of a specific SNMP packet
- CVE-2019-0042Incorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices
- CVE-2019-0041Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.
- CVE-2019-0040Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface
- CVE-2019-0039Junos OS: Login credentials are vulnerable to brute force attacks through the REST API
- CVE-2019-0038SRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS
- CVE-2019-0037Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message
- CVE-2019-0036Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored
- CVE-2019-0035Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes
- CVE-2019-0033SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.
- CVE-2019-0032Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.
- CVE-2019-0031Junos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.
- CVE-2019-0028Junos OS: RPD process crashes due to specific BGP peer restarts condition.
- CVE-2019-0019BGP packets can trigger rpd crash when BGP tracing is enabled.
- CVE-2019-0008QFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process
- CVE-2019-0030Juniper ATP: Password hashing uses DES and a hardcoded salt
- CVE-2019-0029Juniper ATP: Splunk credentials are in logged in clear text
- CVE-2019-0027Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration