Juniper Junos

788 CVEs affecting Juniper Junos. Latest disclosed: 2026-07-09. Critical: 28, High: 329.

Top CVEs affecting Juniper Junos
CVESeverityScorePublishedSummary
CVE-2021-0248Critical10.02021-04-22This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker t…
CVE-2021-0211Critical10.02021-01-15An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attac…
CVE-2020-1614Critical10.02020-04-08A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF) instance, which allows an attacker to tak…
CVE-2017-2343Critical10.02017-07-17The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of…
CVE-2017-2349Critical9.92017-07-17A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the devi…
CVE-2024-21591Critical9.82024-01-12 An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to ca…
CVE-2023-36845Critical9.82023-08-17A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-bas…
CVE-2021-0254Critical9.82021-04-22A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially craf…
CVE-2020-1654Critical9.82020-07-17On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Den…
CVE-2020-1647Critical9.82020-07-17On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, a double free vulnerability can lead to a Denial of S…
CVE-2020-1615Critical9.82020-04-08The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these default cr…
CVE-2020-10188Critical9.82020-03-06utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overf…
CVE-2019-0036Critical9.82019-04-10When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" (e.g. "internal-1", "internal-2", etc.) are silently ignore…
CVE-2019-0008Critical9.82019-04-10A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process o…
CVE-2019-0006Critical9.82019-01-15A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, Q…
CVE-2019-0002Critical9.82019-01-15On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. Wh…
CVE-2018-0044Critical9.82018-10-10An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the…
CVE-2018-0037Critical9.82018-07-11Junos OS routing protocol daemon (RPD) process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages…
CVE-2018-0016Critical9.82018-04-11Receipt of a specially crafted Connectionless Network Protocol (CLNP) datagram destined to an interface of a Junos OS device may result in a kernel crash or le…
CVE-2018-0007Critical9.82018-01-10An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through a local segment broadcast, may be able t…