Juniper Networks
Page 6 of 10 — Juniper Networks CVEs from a corpus of 915, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-31378 | Medium | 6.8 | 2021-10-19 | In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.), on Juniper Networks Junos OS devices where RAD… |
CVE-2021-31377 | Medium | 5.5 | 2021-10-19 | An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated attacker to… |
CVE-2021-31376 | High | 7.5 | 2021-10-19 | An Improper Input Validation vulnerability in Packet Forwarding Engine manager (FXPC) process of Juniper Networks Junos OS allows an attacker to cause a Denial… |
CVE-2021-31375 | High | 7.2 | 2021-10-19 | An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Res… |
CVE-2021-31374 | High | 7.5 | 2021-10-19 | On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (… |
CVE-2021-31373 | High | 8.0 | 2021-10-19 | A persistent Cross-Site Scripting (XSS) vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inje… |
CVE-2021-31372 | High | 8.8 | 2021-10-19 | An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to… |
CVE-2021-31371 | Medium | 5.3 | 2021-10-19 | Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP ad… |
CVE-2021-31370 | Medium | 6.5 | 2021-10-19 | An Incomplete List of Disallowed Inputs vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows… |
CVE-2021-31369 | Medium | 5.3 | 2021-10-19 | On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthe… |
CVE-2021-31368 | High | 7.5 | 2021-10-19 | An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an unauthenticated network based attacker to cause 100% CP… |
CVE-2021-31367 | Medium | 6.5 | 2021-10-19 | A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows an a… |
CVE-2021-31366 | Medium | 6.5 | 2021-10-19 | An Unchecked Return Value vulnerability in the authd (authentication daemon) of Juniper Networks Junos OS on MX Series configured for subscriber management / B… |
CVE-2021-31365 | Medium | 6.5 | 2021-10-19 | An Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on EX2300, EX3400 and EX4300 Series platforms allows an adjacent attacker sendi… |
CVE-2021-31364 | Medium | 5.9 | 2021-10-19 | An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on… |
CVE-2021-31363 | Medium | 6.5 | 2021-10-19 | In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS… |
CVE-2021-31362 | Medium | 6.5 | 2021-10-19 | A Protection Mechanism Failure vulnerability in RPD (routing protocol daemon) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthentica… |
CVE-2021-31361 | Medium | 5.3 | 2021-10-19 | An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Junos OS on… |
CVE-2021-31360 | High | 7.1 | 2021-10-19 | An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved command-line interpreter (CLI) allows a low-privileged use… |
CVE-2021-31359 | High | 7.8 | 2021-10-19 | A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause the Juniper DHCP daem… |
CVE-2021-31358 | High | 7.8 | 2021-10-19 | A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able t… |
CVE-2021-31357 | High | 7.8 | 2021-10-19 | A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be abl… |
CVE-2021-31356 | High | 7.8 | 2021-10-19 | A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to byp… |
CVE-2021-31355 | High | 8.0 | 2021-10-19 | A persistent cross-site scripting (XSS) vulnerability in the captive portal graphical user interface of Juniper Networks Junos OS may allow a remote authentica… |
CVE-2021-31354 | High | 7.1 | 2021-10-19 | An Out Of Bounds (OOB) access vulnerability in the handling of responses by a Juniper Agile License (JAL) Client in Juniper Networks Junos OS and Junos OS Evol… |
CVE-2021-31353 | High | 7.5 | 2021-10-19 | An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specific BGP upda… |
CVE-2021-31352 | Medium | 5.3 | 2021-10-19 | An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which cou… |
CVE-2021-31351 | High | 7.5 | 2021-10-19 | An Improper Check for Unusual or Exceptional Conditions in packet processing on the MS-MPC/MS-MIC utilized by Juniper Networks Junos OS allows a malicious atta… |
CVE-2021-31350 | High | 7.5 | 2021-10-19 | An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit (JET) API on Juniper Networks Junos OS and Junos OS… |
CVE-2021-31349 | Critical | 9.8 | 2021-10-19 | The usage of an internal HTTP header created an authentication bypass vulnerability (CWE-287), allowing an attacker to view internal files, change settings, ma… |
CVE-2021-0299 | High | 7.5 | 2021-10-19 | An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Juno… |
CVE-2021-0298 | Medium | 4.7 | 2021-10-19 | A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (… |
CVE-2021-0297 | Medium | 6.5 | 2021-10-19 | A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authenticat… |
CVE-2021-0296 | High | 7.4 | 2021-10-19 | The Juniper Networks CTPView server is not enforcing HTTP Strict Transport Security (HSTS). HSTS is an optional response header which allows servers to indicat… |
CVE-2021-0284 | High | 7.5 | 2021-08-17 | A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby… |
CVE-2021-0295 | Medium | 6.1 | 2021-07-15 | A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trig… |
CVE-2021-0294 | Medium | 5.3 | 2021-07-15 | A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Juno… |
CVE-2021-0293 | Medium | 5.5 | 2021-07-15 | A vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI command 'sho… |
CVE-2021-0292 | Medium | 6.5 | 2021-07-15 | An Uncontrolled Resource Consumption vulnerability in the ARP daemon (arpd) and Network Discovery Protocol (ndp) process of Juniper Networks Junos OS Evolved a… |
CVE-2021-0291 | Medium | 6.5 | 2021-07-15 | An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently p… |
CVE-2021-0290 | Medium | 6.5 | 2021-07-15 | Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially crafted fr… |
CVE-2021-0289 | Medium | 6.5 | 2021-07-15 | When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet (AE) interface units, a Time-of-check Time-of-use (TOCTOU) Race Cond… |
CVE-2021-0288 | Medium | 6.5 | 2021-07-15 | A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs (Modular Po… |
CVE-2021-0287 | Medium | 6.5 | 2021-07-15 | In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algorithm for Se… |
CVE-2021-0286 | High | 7.5 | 2021-07-15 | A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially crafted packets to th… |
CVE-2021-0285 | High | 7.5 | 2021-07-15 | An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sending large a… |
CVE-2021-0283 | High | 7.5 | 2021-07-15 | A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby… |
CVE-2021-0282 | High | 7.5 | 2021-07-15 | On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon (RPD) cr… |
CVE-2021-0281 | Medium | 5.9 | 2021-07-15 | On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI) receipt of a specific packet from th… |
CVE-2021-0280 | High | 7.5 | 2021-07-15 | Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise (PE) chipset-based line cards, dd… |
CVE-2021-0279 | High | 8.6 | 2021-07-15 | Juniper Networks Contrail Cloud (CC) releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of Ra… |
CVE-2021-0278 | High | 8.8 | 2021-07-15 | An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root o… |
CVE-2021-0277 | High | 8.8 | 2021-07-15 | An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos… |
CVE-2021-0276 | Critical | 9.8 | 2021-07-15 | A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an… |
CVE-2021-0275 | High | 8.8 | 2021-04-22 | A Cross-site Scripting (XSS) vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining access to… |
CVE-2021-0273 | Medium | 5.3 | 2021-04-22 | An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX100… |
CVE-2021-0272 | Medium | 6.5 | 2021-04-22 | A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators (FPCs) on Juniper Networks Junos OS all… |
CVE-2021-0271 | Medium | 6.5 | 2021-04-22 | A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected attacker to… |
CVE-2021-0270 | High | 7.5 | 2021-04-22 | On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine (PFE) microkernel ar… |
CVE-2021-0269 | High | 8.8 | 2021-04-22 | The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a number of different malicious actions aga… |
CVE-2021-0268 | High | 8.8 | 2021-04-22 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buffer overflo… |
CVE-2021-0267 | High | 7.4 | 2021-04-22 | An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to ca… |
CVE-2021-0266 | High | 8.1 | 2021-04-22 | The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a… |
CVE-2021-0265 | High | 8.1 | 2021-04-22 | An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host… |
CVE-2021-0264 | Medium | 5.9 | 2021-04-22 | A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 c… |
CVE-2021-0263 | Medium | 5.9 | 2021-04-22 | A Data Processing vulnerability in the Multi-Service process (multi-svcs) on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the pro… |
CVE-2021-0262 | Medium | 6.5 | 2021-04-22 | Through routine static code analysis of the Juniper Networks Junos OS software codebase, the Secure Development Life Cycle team identified a Use After Free vul… |
CVE-2021-0261 | High | 7.5 | 2021-04-22 | A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Ca… |
CVE-2021-0260 | High | 7.3 | 2021-04-22 | An improper authorization vulnerability in the Simple Network Management Protocol daemon (snmpd) service of Juniper Networks Junos OS leads an unauthenticated… |
CVE-2021-0259 | High | 7.4 | 2021-04-22 | Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instability migh… |
CVE-2021-0258 | Medium | 5.9 | 2021-04-22 | A vulnerability in the forwarding of transit TCPv6 packets received on the Ethernet management interface of Juniper Networks Junos OS allows an attacker to tri… |
CVE-2021-0257 | Medium | 6.5 | 2021-04-22 | On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs (Modular Port Concentrators) where Integrated Routing and Bridging (IRB) interfa… |
CVE-2021-0256 | Medium | 5.5 | 2021-04-22 | A sensitive information disclosure vulnerability in the mosquitto message broker of Juniper Networks Junos OS may allow a locally authenticated user with shell… |
CVE-2021-0255 | Medium | 5.5 | 2021-04-22 | A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate p… |
CVE-2021-0254 | Critical | 9.8 | 2021-04-22 | A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially craf… |
CVE-2021-0253 | High | 7.8 | 2021-04-22 | NFX Series devices using Juniper Networks Junos OS are susceptible to a local command execution vulnerability thereby allowing an attacker to elevate their pri… |
CVE-2021-0252 | High | 7.8 | 2021-04-22 | NFX Series devices using Juniper Networks Junos OS are susceptible to a local code execution vulnerability thereby allowing an attacker to elevate their privil… |
CVE-2021-0251 | High | 8.6 | 2021-04-22 | A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery (CPCD) services daemon (cpcd) of Juniper Networks Junos OS on MX Series with MS… |
CVE-2021-0250 | High | 7.5 | 2021-04-22 | In segment routing traffic engineering (SRTE) environments where the BGP Monitoring Protocol (BMP) feature is enable, a vulnerability in the Routing Protocol D… |
CVE-2021-0249 | High | 8.1 | 2021-04-22 | On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS may allow… |
CVE-2021-0248 | Critical | 10.0 | 2021-04-22 | This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker t… |
CVE-2021-0247 | Medium | 5.1 | 2021-04-22 | A Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization) vulnerability in the firewall process (dfwd) of Juniper Networks Ju… |
CVE-2021-0246 | High | 7.3 | 2021-04-22 | On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect default perm… |
CVE-2021-0245 | High | 7.8 | 2021-04-22 | A Use of Hard-coded Credentials vulnerability in Juniper Networks Junos OS on Junos Fusion satellite devices allows an attacker who is local to the device to e… |
CVE-2021-0244 | High | 7.4 | 2021-04-22 | A signal handler race condition exists in the Layer 2 Address Learning Daemon (L2ALD) of Juniper Networks Junos OS due to the absence of a specific protection… |
CVE-2021-0243 | Medium | 4.7 | 2021-04-22 | Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limi… |
CVE-2021-0242 | Medium | 6.5 | 2021-04-22 | A vulnerability due to the improper handling of direct memory access (DMA) buffers on EX4300 switches on Juniper Networks Junos OS allows an attacker sending s… |
CVE-2021-0241 | High | 7.4 | 2021-04-22 | On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon (JD… |
CVE-2021-0240 | High | 7.4 | 2021-04-22 | On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, the Juniper Networks Dynamic Host Configuration Protocol Daemon… |
CVE-2021-0239 | Medium | 6.5 | 2021-04-22 | In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit (AFT) manager process (E… |
CVE-2021-0238 | Medium | 5.5 | 2021-04-22 | When a MX Series is configured as a Broadband Network Gateway (BNG) based on Layer 2 Tunneling Protocol (L2TP), executing certain CLI command may cause the sys… |
CVE-2021-0237 | Medium | 6.5 | 2021-04-22 | On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series deployed as a Virtual Chassis with a specific Layer 2 circuit configuration, P… |
CVE-2021-0236 | Medium | 6.5 | 2021-04-22 | Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon (RPD) service, upo… |
CVE-2021-0235 | High | 7.3 | 2021-04-22 | On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect… |
CVE-2021-0234 | Medium | 5.8 | 2021-04-22 | Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configurat… |
CVE-2021-0233 | High | 7.5 | 2021-04-22 | A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of… |
CVE-2021-0232 | High | 7.4 | 2021-04-22 | An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about th… |
CVE-2021-0231 | Medium | 6.5 | 2021-04-22 | A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue aff… |
CVE-2021-0230 | High | 7.5 | 2021-04-22 | On Juniper Networks SRX Series devices with link aggregation (lag) configured, executing any operation that fetches Aggregated Ethernet (AE) interface statisti… |
CVE-2021-0229 | Medium | 5.3 | 2021-04-22 | An uncontrolled resource consumption vulnerability in Message Queue Telemetry Transport (MQTT) server of Juniper Networks Junos OS allows an attacker to cause… |