Juniper Networks
Page 8 of 10 — Juniper Networks CVEs from a corpus of 915, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-1606 | Medium | 5.4 | 2020-01-15 | A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and… |
CVE-2020-1605 | High | 8.8 | 2020-01-15 | When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay… |
CVE-2020-1604 | Medium | 6.5 | 2020-01-15 | On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets… |
CVE-2020-1603 | High | 8.6 | 2020-01-15 | Specific IPv6 packets sent by clients processed by the Routing Engine (RE) are improperly handled. These IPv6 packets are designed to be blocked by the RE from… |
CVE-2020-1602 | High | 7.1 | 2020-01-15 | When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay… |
CVE-2020-1601 | Medium | 5.3 | 2020-01-15 | Certain types of malformed Path Computation Element Protocol (PCEP) packets when received and processed by a Juniper Networks Junos OS device serving as a Path… |
CVE-2020-1600 | Medium | 6.5 | 2020-01-15 | In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon (RPD) in… |
CVE-2019-0075 | High | 7.5 | 2019-10-09 | A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reb… |
CVE-2019-0074 | Medium | 5.5 | 2019-10-09 | A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine (NG-RE)… |
CVE-2019-0073 | Medium | 6.6 | 2019-10-09 | The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow another user… |
CVE-2019-0072 | Medium | 5.6 | 2019-10-09 | An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain acce… |
CVE-2019-0071 | High | 7.8 | 2019-10-09 | Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versio… |
CVE-2019-0070 | High | 8.8 | 2019-10-09 | An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they… |
CVE-2019-0069 | Medium | 5.9 | 2019-10-09 | On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, S… |
CVE-2019-0068 | Medium | 6.5 | 2019-10-09 | The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specifi… |
CVE-2019-0067 | Medium | 6.5 | 2019-10-09 | Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart (vmcore). By continuously sending a specially crafted… |
CVE-2019-0066 | High | 7.5 | 2019-10-09 | An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attacker to cause a Denia… |
CVE-2019-0065 | Medium | 5.3 | 2019-10-09 | On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sendin… |
CVE-2019-0064 | High | 7.5 | 2019-10-09 | On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may crash when a specific TCP packet is receiv… |
CVE-2019-0063 | Medium | 6.5 | 2019-10-09 | When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might crash when receivi… |
CVE-2019-0062 | High | 7.5 | 2019-10-09 | A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web s… |
CVE-2019-0061 | High | 7.8 | 2019-10-09 | The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal un… |
CVE-2019-0060 | High | 7.5 | 2019-10-09 | The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets throug… |
CVE-2019-0059 | High | 7.5 | 2019-10-09 | A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific command… |
CVE-2019-0058 | High | 7.8 | 2019-10-09 | A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can… |
CVE-2019-0057 | High | 7.8 | 2019-10-09 | An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos D… |
CVE-2019-0056 | High | 7.5 | 2019-10-09 | This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Re… |
CVE-2019-0055 | High | 7.5 | 2019-10-09 | A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by se… |
CVE-2019-0054 | Medium | 6.8 | 2019-10-09 | An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows a… |
CVE-2019-0051 | Medium | 6.5 | 2019-10-09 | SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Rep… |
CVE-2019-0050 | High | 7.5 | 2019-10-09 | Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srx… |
CVE-2019-0047 | High | 8.8 | 2019-10-09 | A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrative actions… |
CVE-2019-0053 | High | 7.8 | 2019-07-11 | Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to… |
CVE-2019-0052 | High | 7.5 | 2019-07-11 | The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a… |
CVE-2019-0049 | High | 7.5 | 2019-07-11 | On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on… |
CVE-2019-0048 | Medium | 5.8 | 2019-07-11 | On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority… |
CVE-2019-0046 | Medium | 6.5 | 2019-07-11 | A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the EX4… |
CVE-2019-0044 | High | 7.5 | 2019-04-10 | Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a special… |
CVE-2019-0043 | High | 7.5 | 2019-04-10 | In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon (RPD) process to crash and restart. By continuously sending a spe… |
CVE-2019-0042 | Medium | 4.2 | 2019-04-10 | Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allo… |
CVE-2019-0041 | High | 8.6 | 2019-04-10 | On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface (lo0). The device may fail… |
CVE-2019-0040 | Critical | 9.1 | 2019-04-10 | On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance (IRI). External packets destined to port 111 should be dropped. Due… |
CVE-2019-0039 | High | 8.1 | 2019-04-10 | If REST API is enabled, the Junos OS login credentials are vulnerable to brute force attacks. The high default connection limit of the REST API may allow an at… |
CVE-2019-0038 | Medium | 6.5 | 2019-04-10 | Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX345 services gateway may create a denial of service (DoS) condition due to buffe… |
CVE-2019-0037 | High | 7.5 | 2019-04-10 | In a Dynamic Host Configuration Protocol version 6 (DHCPv6) environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit message… |
CVE-2019-0036 | Critical | 9.8 | 2019-04-10 | When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" (e.g. "internal-1", "internal-2", etc.) are silently ignore… |
CVE-2019-0035 | Medium | 6.8 | 2019-04-10 | When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed using "set sy… |
CVE-2019-0033 | High | 7.5 | 2019-04-10 | A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of S… |
CVE-2019-0032 | High | 7.8 | 2019-04-10 | A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated a… |
CVE-2019-0031 | High | 7.5 | 2019-04-10 | Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon c… |
CVE-2019-0028 | High | 7.5 | 2019-04-10 | On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that h… |
CVE-2019-0019 | High | 7.5 | 2019-04-10 | When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after… |
CVE-2019-0008 | Critical | 9.8 | 2019-04-10 | A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process o… |
CVE-2019-0030 | High | 7.2 | 2019-01-15 | Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5… |
CVE-2019-0029 | High | 8.8 | 2019-01-15 | Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk ser… |
CVE-2019-0027 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script a… |
CVE-2019-0026 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and stea… |
CVE-2019-0025 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and s… |
CVE-2019-0024 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and s… |
CVE-2019-0023 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal se… |
CVE-2019-0022 | Critical | 10.0 | 2019-01-15 | Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the… |
CVE-2019-0021 | High | 7.1 | 2019-01-15 | On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to v… |
CVE-2019-0020 | Critical | 10.0 | 2019-01-15 | Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the… |
CVE-2019-0018 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and st… |
CVE-2019-0017 | Medium | 6.5 | 2019-01-15 | The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images o… |
CVE-2019-0016 | Medium | 6.5 | 2019-01-15 | A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions… |
CVE-2019-0015 | Medium | 5.4 | 2019-01-15 | A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted… |
CVE-2019-0014 | High | 7.5 | 2019-01-15 | On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to… |
CVE-2019-0013 | Medium | 6.5 | 2019-01-15 | The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, re… |
CVE-2019-0012 | High | 7.5 | 2019-01-15 | A Denial of Service (DoS) vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause… |
CVE-2019-0011 | Medium | 6.5 | 2019-01-15 | The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destined for ano… |
CVE-2019-0010 | High | 7.5 | 2019-01-15 | An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an indicatio… |
CVE-2019-0009 | Medium | 5.5 | 2019-01-15 | On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (PFE). In… |
CVE-2019-0007 | Critical | 9.3 | 2019-01-15 | The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a fami… |
CVE-2019-0006 | Critical | 9.8 | 2019-01-15 | A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, Q… |
CVE-2019-0004 | Medium | 5.5 | 2019-01-15 | On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operatio… |
CVE-2019-0003 | Medium | 5.9 | 2019-01-15 | When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration… |
CVE-2019-0002 | Critical | 9.8 | 2019-01-15 | On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. Wh… |
CVE-2019-0001 | High | 7.5 | 2019-01-15 | Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber… |
CVE-2018-0063 | Medium | 6.5 | 2018-10-10 | A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the privat… |
CVE-2018-0062 | Medium | 5.3 | 2018-10-10 | A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenti… |
CVE-2018-0061 | Medium | 5.3 | 2018-10-10 | A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect system perfor… |
CVE-2018-0060 | Medium | 5.3 | 2018-10-10 | An improper input validation weakness in the device control daemon process (dcd) of Juniper Networks Junos OS allows an attacker to cause a Denial of Service t… |
CVE-2018-0059 | Medium | 5.4 | 2018-10-10 | A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML… |
CVE-2018-0058 | Medium | 5.9 | 2018-10-10 | Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash (vmcore), causing the device to reboot. The issue is specific to the… |
CVE-2018-0057 | Medium | 6.1 | 2018-10-10 | On MX Series and M120/M320 platforms configured in a Broadband Edge (BBE) environment, subscribers logging in with DHCP Option 50 to request a specific IP addr… |
CVE-2018-0056 | Medium | 6.5 | 2018-10-10 | If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfa… |
CVE-2018-0055 | Medium | 6.5 | 2018-10-10 | Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband Edge (BBE) environment may result in a j… |
CVE-2018-0054 | Medium | 6.5 | 2018-10-10 | On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the management interface (fxp0) can cause egress… |
CVE-2018-0053 | Medium | 6.8 | 2018-10-10 | An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of t… |
CVE-2018-0052 | High | 7.2 | 2018-10-10 | If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can obtain root access to the device. RSH se… |
CVE-2018-0051 | High | 7.5 | 2018-10-10 | A Denial of Service vulnerability in the SIP application layer gateway (ALG) component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC… |
CVE-2018-0050 | High | 7.5 | 2018-10-10 | An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of t… |
CVE-2018-0049 | High | 7.5 | 2018-10-10 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash. Continued receipt of this speci… |
CVE-2018-0048 | High | 7.5 | 2018-10-10 | A vulnerability in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support can allow a network based unauthenticated attacker to cause… |
CVE-2018-0047 | High | 8.0 | 2018-10-10 | A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent an… |
CVE-2018-0046 | High | 8.8 | 2018-10-10 | A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session… |
CVE-2018-0045 | High | 8.8 | 2018-10-10 | Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execu… |
CVE-2018-0044 | Critical | 9.8 | 2018-10-10 | An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the… |
CVE-2018-0043 | High | 8.8 | 2018-10-10 | Receipt of a specific MPLS packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execution. By continuousl… |