Juniper
Page 9 of 12 — Juniper CVEs from a corpus of 1110, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0057 | Medium | 6.1 | 2018-10-10 | On MX Series and M120/M320 platforms configured in a Broadband Edge (BBE) environment, subscribers logging in with DHCP Option 50 to request a specific IP addr… |
CVE-2018-0056 | Medium | 6.5 | 2018-10-10 | If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfa… |
CVE-2018-0055 | Medium | 6.5 | 2018-10-10 | Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband Edge (BBE) environment may result in a j… |
CVE-2018-0054 | Medium | 6.5 | 2018-10-10 | On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the management interface (fxp0) can cause egress… |
CVE-2018-0053 | Medium | 6.8 | 2018-10-10 | An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of t… |
CVE-2018-0052 | High | 7.2 | 2018-10-10 | If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can obtain root access to the device. RSH se… |
CVE-2018-0051 | High | 7.5 | 2018-10-10 | A Denial of Service vulnerability in the SIP application layer gateway (ALG) component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC… |
CVE-2018-0050 | High | 7.5 | 2018-10-10 | An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of t… |
CVE-2018-0049 | High | 7.5 | 2018-10-10 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash. Continued receipt of this speci… |
CVE-2018-0048 | High | 7.5 | 2018-10-10 | A vulnerability in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support can allow a network based unauthenticated attacker to cause… |
CVE-2018-0047 | High | 8.0 | 2018-10-10 | A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent an… |
CVE-2018-0046 | High | 8.8 | 2018-10-10 | A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session… |
CVE-2018-0045 | High | 8.8 | 2018-10-10 | Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execu… |
CVE-2018-0044 | Critical | 9.8 | 2018-10-10 | An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the… |
CVE-2018-0043 | High | 8.8 | 2018-10-10 | Receipt of a specific MPLS packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execution. By continuousl… |
CVE-2018-15505 | High | 7.5 | 2018-08-18 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause… |
CVE-2018-15504 | High | 7.5 | 2018-08-18 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which r… |
CVE-2018-0042 | Critical | 9.8 | 2018-07-11 | Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability. |
CVE-2018-0041 | Critical | 9.8 | 2018-07-11 | Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network b… |
CVE-2018-0040 | Critical | 9.8 | 2018-07-11 | Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network… |
CVE-2018-0039 | Medium | 6.5 | 2018-07-11 | Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials a… |
CVE-2018-0038 | Critical | 9.8 | 2018-07-11 | Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These credentials… |
CVE-2018-0037 | Critical | 9.8 | 2018-07-11 | Junos OS routing protocol daemon (RPD) process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages… |
CVE-2018-0035 | Medium | 4.4 | 2018-07-11 | QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been… |
CVE-2018-0034 | Medium | 5.3 | 2018-07-11 | A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted… |
CVE-2018-0032 | High | 7.5 | 2018-07-11 | The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in… |
CVE-2018-0031 | Medium | 5.3 | 2018-07-11 | Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet… |
CVE-2018-0030 | High | 7.5 | 2018-07-11 | Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously sending specific MPLS… |
CVE-2018-0029 | Medium | 5.7 | 2018-07-11 | While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash a… |
CVE-2018-0027 | High | 7.5 | 2018-07-11 | Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When RPD is unavailable, routing updates cann… |
CVE-2018-0026 | Medium | 4.7 | 2018-07-11 | After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by running the command: us… |
CVE-2018-0025 | Medium | 6.1 | 2018-07-11 | When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP… |
CVE-2018-0024 | High | 7.8 | 2018-07-11 | An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full contr… |
CVE-2018-0023 | Medium | 5.5 | 2018-04-11 | JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample fil… |
CVE-2018-0022 | High | 7.5 | 2018-04-11 | A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specific MPLS packet. Appr… |
CVE-2018-0021 | High | 8.8 | 2018-04-11 | If all 64 digits of the connectivity association name (CKN) key or all 32 digits of the connectivity association key (CAK) key are not configured, all remainin… |
CVE-2018-0020 | High | 7.5 | 2018-04-11 | Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon (rpd) crash and restart. Receipt of a repeated mal… |
CVE-2018-0019 | Medium | 5.3 | 2018-04-11 | A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib2d) may allow a remote network based attacker to cause the mib2d process to crash resulting in a de… |
CVE-2018-0018 | High | 7.5 | 2018-04-11 | On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules, leading to inform… |
CVE-2018-0017 | High | 7.5 | 2018-04-11 | A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a certain valid IPv6 pac… |
CVE-2018-0016 | Critical | 9.8 | 2018-04-11 | Receipt of a specially crafted Connectionless Network Protocol (CLNP) datagram destined to an interface of a Junos OS device may result in a kernel crash or le… |
CVE-2014-3413 | Critical | 9.8 | 2018-04-05 | The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain… |
CVE-2018-0015 | Critical | 9.8 | 2018-02-22 | A malicious user with unrestricted access to the AppFormix application management platform may be able to access a Python debug console and execute system comm… |
CVE-2018-0014 | Medium | 4.3 | 2018-01-10 | Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous pa… |
CVE-2018-0013 | Medium | 6.5 | 2018-01-10 | A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the sys… |
CVE-2018-0012 | High | 7.8 | 2018-01-10 | Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges. |
CVE-2018-0011 | Medium | 5.4 | 2018-01-10 | A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal se… |
CVE-2018-0010 | Medium | 6.5 | 2018-01-10 | A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created… |
CVE-2018-0009 | Medium | 5.4 | 2018-01-10 | On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this… |
CVE-2018-0008 | Medium | 6.2 | 2018-01-10 | An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions… |
CVE-2018-0007 | Critical | 9.8 | 2018-01-10 | An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through a local segment broadcast, may be able t… |
CVE-2018-0006 | Medium | 6.5 | 2018-01-10 | A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by the BBE subscriber… |
CVE-2018-0005 | High | 7.4 | 2018-01-10 | QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to de… |
CVE-2018-0004 | Medium | 6.5 | 2018-01-10 | A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and s… |
CVE-2018-0003 | Medium | 6.5 | 2018-01-10 | A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequ… |
CVE-2018-0002 | High | 8.2 | 2018-01-10 | On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory co… |
CVE-2018-0001 | Critical | 9.8 | 2018-01-10 | A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafte… |
CVE-2017-10624 | High | 7.5 | 2017-10-13 | Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modification… |
CVE-2017-10623 | High | 7.1 | 2017-10-13 | Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, injec… |
CVE-2017-10622 | Critical | 9.8 | 2017-10-13 | An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to… |
CVE-2017-10621 | Medium | 5.3 | 2017-10-13 | A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attackers to cause a denial of service. Affecte… |
CVE-2017-10620 | High | 7.4 | 2017-10-13 | Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-m… |
CVE-2017-10619 | High | 7.5 | 2017-10-13 | When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availab… |
CVE-2017-10618 | Medium | 5.9 | 2017-10-13 | When the 'bgp-error-tolerance' feature â€" designed to help mitigate remote session resets from malformed path attributes â€" is enabled, a… |
CVE-2017-10617 | Medium | 5.0 | 2017-10-13 | The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files… |
CVE-2017-10616 | Medium | 5.3 | 2017-10-13 | The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to… |
CVE-2017-10615 | Critical | 9.8 | 2017-10-13 | A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially ex… |
CVE-2017-10614 | Medium | 5.3 | 2017-10-13 | A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue w… |
CVE-2017-10613 | Medium | 5.5 | 2017-10-13 | A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Network… |
CVE-2017-10612 | High | 8.0 | 2017-10-13 | A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or… |
CVE-2017-10611 | Medium | 6.5 | 2017-10-13 | If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not lim… |
CVE-2017-10610 | High | 7.5 | 2017-10-13 | On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd pr… |
CVE-2017-10608 | High | 7.5 | 2017-10-13 | Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. This vulner… |
CVE-2017-10607 | High | 7.5 | 2017-10-13 | Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit (PDU) sent direc… |
CVE-2017-10606 | Medium | 4.4 | 2017-10-13 | Version 4.40 of the TPM (Trusted Platform Module) firmware on Juniper Networks SRX300 Series has a weakness in generating cryptographic keys that may allow an… |
CVE-2016-4925 | High | 7.5 | 2017-10-13 | Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler… |
CVE-2016-4924 | High | 8.4 | 2017-10-13 | An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE image… |
CVE-2016-4923 | High | 8.0 | 2017-10-13 | Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web… |
CVE-2016-4922 | High | 8.4 | 2017-10-13 | Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating syst… |
CVE-2016-4921 | High | 7.5 | 2017-10-13 | By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability t… |
CVE-2016-1265 | Critical | 9.8 | 2017-10-13 | A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos… |
CVE-2016-1261 | High | 7.1 | 2017-10-13 | J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS). |
CVE-2017-2349 | Critical | 9.9 | 2017-07-17 | A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the devi… |
CVE-2017-2348 | High | 7.5 | 2017-07-17 | The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilizat… |
CVE-2017-2347 | Medium | 6.5 | 2017-07-17 | A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configu… |
CVE-2017-2346 | Medium | 5.9 | 2017-07-17 | An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway (ALG). Repeated crashes of the Service… |
CVE-2017-2345 | Critical | 9.8 | 2017-07-17 | On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and restart by se… |
CVE-2017-2344 | High | 7.8 | 2017-07-17 | A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service… |
CVE-2017-2343 | Critical | 10.0 | 2017-07-17 | The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of… |
CVE-2017-2342 | High | 8.1 | 2017-07-17 | MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link can not be established. It… |
CVE-2017-2341 | High | 8.8 | 2017-07-17 | An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Ju… |
CVE-2017-2339 | High | 8.4 | 2017-07-17 | A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the '… |
CVE-2017-2338 | High | 8.4 | 2017-07-17 | A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the '… |
CVE-2017-2337 | High | 8.4 | 2017-07-17 | A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the '… |
CVE-2017-2336 | Critical | 9.6 | 2017-07-17 | A reflected cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a network based at… |
CVE-2017-2335 | High | 8.4 | 2017-07-17 | A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the '… |
CVE-2017-2314 | High | 7.5 | 2017-07-17 | Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart. By continuously sending specially crafted BGP… |
CVE-2017-10605 | High | 8.6 | 2017-07-17 | On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or inte… |
CVE-2017-10604 | Medium | 5.3 | 2017-07-17 | When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect… |
CVE-2017-10603 | High | 7.0 | 2017-07-17 | An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This i… |