Juniper Networks
Page 7 of 10 — Juniper Networks CVEs from a corpus of 915, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0228 | Medium | 6.5 | 2021-04-22 | An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC (Modular Port Concentrator) d… |
CVE-2021-0227 | High | 7.5 | 2021-04-22 | An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an att… |
CVE-2021-0226 | High | 7.1 | 2021-04-22 | On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Se… |
CVE-2021-0225 | Medium | 5.8 | 2021-04-22 | An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses t… |
CVE-2021-0224 | Medium | 6.5 | 2021-04-22 | A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber (BRAS) nodes in Junipe… |
CVE-2021-0216 | Medium | 6.5 | 2021-04-22 | A vulnerability in Juniper Networks Junos OS running on the ACX5448 and ACX710 platforms may cause BFD sessions to flap when a high rate of transit ARP packets… |
CVE-2021-0214 | Medium | 6.5 | 2021-04-22 | A vulnerability in the distributed or centralized periodic packet management daemon (PPMD) of Juniper Networks Junos OS may cause receipt of a malformed packet… |
CVE-2021-0223 | High | 7.8 | 2021-01-15 | A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and… |
CVE-2021-0222 | High | 7.4 | 2021-01-15 | A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending certain crafted protocol packets fr… |
CVE-2021-0221 | Medium | 6.5 | 2021-01-15 | In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loop may occur upon receipt of specific IP… |
CVE-2021-0220 | Medium | 6.8 | 2021-01-15 | The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who… |
CVE-2021-0219 | Medium | 6.7 | 2021-01-15 | A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticated attacker with pri… |
CVE-2021-0218 | High | 7.8 | 2021-01-15 | A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges… |
CVE-2021-0217 | High | 7.4 | 2021-01-15 | A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running Juniper Networks Junos OS with DHCP lo… |
CVE-2021-0215 | Medium | 6.5 | 2021-01-15 | On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interfa… |
CVE-2021-0212 | Medium | 5.0 | 2021-01-15 | An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administra… |
CVE-2021-0211 | Critical | 10.0 | 2021-01-15 | An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attac… |
CVE-2021-0210 | Medium | 6.8 | 2021-01-15 | An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target syst… |
CVE-2021-0209 | Medium | 6.5 | 2021-01-15 | In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing… |
CVE-2021-0208 | High | 8.8 | 2021-01-15 | An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to send a malformed RSV… |
CVE-2021-0207 | High | 7.5 | 2021-01-15 | An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain tra… |
CVE-2021-0206 | High | 7.5 | 2021-01-15 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) t… |
CVE-2021-0205 | Medium | 5.8 | 2021-01-15 | When the "Intrusion Detection Service" (IDS) feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or destinatio… |
CVE-2021-0204 | High | 7.8 | 2021-01-15 | A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos OS may allow a locally authenticated sh… |
CVE-2021-0203 | High | 8.6 | 2021-01-15 | On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG interface might not tak… |
CVE-2021-0202 | High | 7.5 | 2021-01-15 | On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrated Routing and Bridging (IRB) interface… |
CVE-2020-1689 | Medium | 6.5 | 2020-10-16 | On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of specific layer 2 frame… |
CVE-2020-1688 | Medium | 6.5 | 2020-10-16 | On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to p… |
CVE-2020-1687 | Medium | 6.5 | 2020-10-16 | On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in (Ethernet VPN) EVPN-(Virtual Extensible LAN) VXLAN configuration, receipt of a… |
CVE-2020-1686 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart (vmcore). This issue can be trigged by a mal… |
CVE-2020-1685 | Medium | 5.8 | 2020-10-16 | When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol (VXLAN), the discard a… |
CVE-2020-1684 | High | 7.5 | 2020-10-16 | On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilizat… |
CVE-2020-1683 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash (vmcore). Prior to the kernel crash… |
CVE-2020-1682 | Medium | 5.5 | 2020-10-16 | An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service (DoS) thro… |
CVE-2020-1681 | Medium | 6.5 | 2020-10-16 | Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networks Junos OS Evolved can cause the ndp p… |
CVE-2020-1680 | Medium | 5.3 | 2020-10-16 | On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component… |
CVE-2020-1679 | High | 7.5 | 2020-10-16 | On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause… |
CVE-2020-1678 | Medium | 6.5 | 2020-10-16 | On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is e… |
CVE-2020-1677 | High | 7.2 | 2020-10-16 | When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to mo… |
CVE-2020-1676 | High | 7.2 | 2020-10-16 | When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML… |
CVE-2020-1675 | High | 8.3 | 2020-10-16 | When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certi… |
CVE-2020-1673 | High | 8.8 | 2020-10-16 | Insufficient Cross-Site Scripting (XSS) protection in Juniper Networks J-Web and web based (HTTP/HTTPS) services allows an unauthenticated attacker to hijack t… |
CVE-2020-1672 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon. The jdhcpd daemon… |
CVE-2020-1671 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon (JD… |
CVE-2020-1670 | Medium | 6.5 | 2020-10-16 | On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine (RE) high CPU load, which could lead to network protoc… |
CVE-2020-1669 | Medium | 6.3 | 2020-10-16 | The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes i… |
CVE-2020-1668 | Medium | 6.5 | 2020-10-16 | On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traff… |
CVE-2020-1667 | High | 8.3 | 2020-10-16 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets proce… |
CVE-2020-1666 | Medium | 6.6 | 2020-10-16 | The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console ca… |
CVE-2020-1665 | Medium | 5.3 | 2020-10-16 | On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not take affect when it… |
CVE-2020-1664 | High | 7.8 | 2020-10-16 | A stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of S… |
CVE-2020-1662 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS and Junos OS Evolved devices, BGP session flapping can lead to a routing process daemon (RPD) crash and restart, limiting the atta… |
CVE-2020-1661 | Medium | 5.3 | 2020-10-16 | On Juniper Networks Junos OS devices configured as a DHCP forwarder, the Juniper Networks Dynamic Host Configuration Protocol Daemon (jdhcp) process might cras… |
CVE-2020-1660 | High | 8.3 | 2020-10-16 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets proce… |
CVE-2020-1657 | High | 7.5 | 2020-10-16 | On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to I… |
CVE-2020-1656 | High | 8.8 | 2020-10-16 | The DHCPv6 Relay-Agent service, part of the Juniper Enhanced jdhcpd daemon shipped with Juniper Networks Junos OS has an Improper Input Validation vulnerabilit… |
CVE-2020-1655 | Medium | 5.3 | 2020-07-17 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2… |
CVE-2020-1654 | Critical | 9.8 | 2020-07-17 | On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Den… |
CVE-2020-1653 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which can lead to Flexible PIC Concentrator (… |
CVE-2020-1652 | Medium | 5.6 | 2020-07-17 | OpenNMS is accessible via port 9443 |
CVE-2020-1651 | Medium | 6.5 | 2020-07-17 | On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the li… |
CVE-2020-1650 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. B… |
CVE-2020-1649 | High | 7.5 | 2020-07-17 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2… |
CVE-2020-1648 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart. This… |
CVE-2020-1647 | Critical | 9.8 | 2020-07-17 | On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, a double free vulnerability can lead to a Denial of S… |
CVE-2020-1646 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon (RPD) crash and r… |
CVE-2020-1645 | High | 8.3 | 2020-07-17 | When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets proce… |
CVE-2020-1644 | High | 7.5 | 2020-07-17 | On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly… |
CVE-2020-1643 | Medium | 5.5 | 2020-07-17 | Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routi… |
CVE-2020-1641 | Medium | 6.5 | 2020-07-17 | A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service (DoS)… |
CVE-2020-1640 | High | 7.5 | 2020-07-17 | An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (routing protocols process) daemon allows an… |
CVE-2020-1631 | High | 8.8 | 2020-05-04 | A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Ze… |
CVE-2020-1632 | High | 8.6 | 2020-04-15 | In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP… |
CVE-2020-1633 | High | 7.4 | 2020-04-09 | Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configured as a Broadband Ne… |
CVE-2020-1639 | High | 7.5 | 2020-04-08 | When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packet to a target device, it may improperly handl… |
CVE-2020-1638 | High | 7.5 | 2020-04-08 | The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destine… |
CVE-2020-1637 | High | 7.2 | 2020-04-08 | A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permit… |
CVE-2020-1634 | High | 7.5 | 2020-04-08 | On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast tr… |
CVE-2020-1630 | Medium | 5.0 | 2020-04-08 | A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual Routing Engines (RE), Virtual Chassis (VC) or high-availability… |
CVE-2020-1629 | Medium | 5.9 | 2020-04-08 | A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while processing a… |
CVE-2020-1628 | Medium | 5.3 | 2020-04-08 | Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP ad… |
CVE-2020-1627 | High | 7.5 | 2020-04-08 | A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service (DoS) by sending specific packets requ… |
CVE-2020-1626 | High | 7.5 | 2020-04-08 | A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the… |
CVE-2020-1625 | Medium | 6.5 | 2020-04-08 | The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated Routing and Bridging (IRB) is configured… |
CVE-2020-1624 | Medium | 5.5 | 2020-04-08 | A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affect… |
CVE-2020-1623 | Medium | 5.5 | 2020-04-08 | A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos… |
CVE-2020-1622 | Medium | 5.5 | 2020-04-08 | A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all ver… |
CVE-2020-1621 | Medium | 5.5 | 2020-04-08 | A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved… |
CVE-2020-1620 | Medium | 5.5 | 2020-04-08 | A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Ev… |
CVE-2020-1619 | Medium | 6.0 | 2020-04-08 | A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Next-Generation Routing Engine (NG-RE), a… |
CVE-2020-1618 | Medium | 6.3 | 2020-04-08 | On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without any passw… |
CVE-2020-1617 | High | 7.5 | 2020-04-08 | This issue occurs on Juniper Networks Junos OS devices which do not support Advanced Forwarding Interface (AFI) / Advanced Forwarding Toolkit (AFT). Devices us… |
CVE-2020-1616 | Medium | 5.3 | 2020-04-08 | Due to insufficient server-side login attempt limit enforcement, a vulnerability in the SSH login service of Juniper Networks Juniper Advanced Threat Preventio… |
CVE-2020-1615 | Critical | 9.8 | 2020-04-08 | The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these default cr… |
CVE-2020-1614 | Critical | 10.0 | 2020-04-08 | A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF) instance, which allows an attacker to tak… |
CVE-2020-1613 | High | 8.6 | 2020-04-08 | A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specif… |
CVE-2020-1611 | Medium | 6.5 | 2020-01-15 | A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP… |
CVE-2020-1609 | High | 8.8 | 2020-01-15 | When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay… |
CVE-2020-1608 | High | 7.5 | 2020-01-15 | Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge (BBE) service may trigger a kernel… |
CVE-2020-1607 | High | 7.5 | 2020-01-15 | Insufficient Cross-Site Scripting (XSS) protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-We… |