Juniper Networks CVEs
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-0056MX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfaces
- CVE-2018-0055Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message
- CVE-2018-0054QFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet frames
- CVE-2018-0053vSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.
- CVE-2018-0052Junos OS: Unauthenticated remote root access possible when RSH service is enabled
- CVE-2018-0051Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG
- CVE-2018-0050Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.
- CVE-2018-0049Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.
- CVE-2018-0048Junos OS: Memory exhaustion denial of service vulnerability in Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support.
- CVE-2018-0047Junos Space Security Director: XSS vulnerability in web administration
- CVE-2018-0046Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS
- CVE-2018-0045Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration
- CVE-2018-0044NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS
- CVE-2018-0043Junos OS: RPD daemon crashes upon receipt of specific MPLS packet
- CVE-2018-0041Contrail Service Orchestration: Hardcoded credentials for Keystone service.
- CVE-2018-0040Contrail Service Orchestration: hardcoded cryptographic certificates and keys
- CVE-2018-0039Contrail Service Orchestration: Hardcoded credentials for Grafana service
- CVE-2018-0037Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages
- CVE-2018-0035Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images
- CVE-2018-0034Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core
- CVE-2018-0032Junos OS: RPD crash when receiving a crafted BGP UPDATE
- CVE-2018-0031Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules
- CVE-2018-0030Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.
- CVE-2018-0029Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0'
- CVE-2018-0027Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service
- CVE-2018-0026Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade
- CVE-2018-0025Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication
- CVE-2018-0024Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root
- CVE-2018-0023Junos Snapshot Administrator (JSNAPy) world writeable default configuration file permission
- CVE-2018-0022Junos OS: Mbuf leak due to processing MPLS packets in VPLS network.