CVE-2021-0251: NULL Pointer Dereference

A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery CPCD services daemon cpcd of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC allows an attacker to send malformed HTTP packets to the device thereby causing a Denial of Service DoS,...

CVE-2021-0261: Out-of-bounds Read

A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN DVPN, Firewall Authentication Pass-Through with Web-Redirect, and Captive Portal allows an unauthenticated attacker to cause an extended Denial of Service DoS for these services by sending a high number of...

CVE-2021-0271: Double Free

A Double Free vulnerability in the software forwarding interface daemon sfid process of Juniper Networks Junos OS allows an adjacently-connected attacker to cause a Denial of Service DoS by sending a crafted ARP packet to the device. Continued receipt and processing of the crafted ARP packets wil...

CVE-2021-0262: Use After Free

Through routine static code analysis of the Juniper Networks Junos OS software codebase, the Secure Development Life Cycle team identified a Use After Free vulnerability in PFE packet processing on the QFX10002-60C switching platform. Exploitation of this vulnerability may allow a logically...

PT-2021-12940

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions 19.4 through 19.4R2-S3-EVO Juniper Networks Junos OS Evolved versions 20.1 through 20.1R2-S3-EVO Juniper Networks Junos OS Evolved versions 20.2 through 20.2R2-S1-EVO Juniper Networks Junos OS Evolve...

PT-2021-12951

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.3 through 17.3R3-S11 Juniper Networks Junos OS versions 17.4 through 17.4R3-S4 Juniper Networks Junos OS versions 18.1 through 18.1R3-S12 Juniper Networks Junos OS versions 18.2 through 18.2R3-S7 Juniper...

PT-2021-12949

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions prior to 15.1R7-S9 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 17.3 prior to 17.3R3-S11...

CVE-2021-0216: Undefined Security Weakness

A vulnerability in Juniper Networks Junos OS running on the ACX5448 and ACX710 platforms may cause BFD sessions to flap when a high rate of transit ARP packets are received. This, in turn, may impact routing protocols and network stability, leading to a Denial of Service DoS condition. When a hig...

CVE-2021-0266: Use of Hard-coded Cryptographic Key

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

PT-2021-12978

Name of the Vulnerable Software and Affected Versions: Junos OS versions 18.1R2 through 18.1R3-S10 Description: A use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition,...

CVE-2021-0256: Execution with Unnecessary Privileges

A sensitive information disclosure vulnerability in the mosquitto message broker of Juniper Networks Junos OS may allow a locally authenticated user with shell access the ability to read portions of sensitive files, such as the master.passwd file. Since mosquitto is shipped with setuid permission...

PT-2021-12956

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Junos Fusion Satellite Devices versions prior to 16.1R7-S7 Juniper Networks Junos OS Junos Fusion Satellite Devices versions 17.1 prior to 17.1R2-S12, 17.1R3-S2 Juniper Networks Junos OS Junos Fusion Satellite Device...

PT-2021-12953 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on the EX4300 versions prior to 17.3R3-S11 Juniper Networks Junos OS on the EX4300 versions prior to 17.4R2-S13 Juniper Networks Junos OS on the EX4300 versions prior to 17.4R3-S4 Juniper Networks Junos OS on the...

PT-2021-12965

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1X49-D240 Junos OS versions prior to 17.3R3-S11 Junos OS versions prior to 17.4R3-S4 Junos OS versions prior to 18.1R3-S12 Junos OS versions prior to 18.2R3-S7 Junos OS versions prior to 18.3R3-S4 Junos OS versio...

PT-2021-12962

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on NFX Series versions 18.1R1 through 18.2R3-S5 Juniper Networks Junos OS on NFX Series versions 18.3 through 18.3R3-S3 Juniper Networks Junos OS on NFX Series versions 18.4 through 18.4R3-S4 Juniper Networks Junos O...

PT-2021-12980

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.3R3-S9 Junos OS versions 17.4 prior to 17.4R3-S2 Junos OS versions 18.1 prior to 18.1R3-S11 Junos OS versions 18.2 prior to 18.2R3-S5 Junos OS versions 18.3 prior to 18.3R3-S3 Junos OS versions 18.4 prior to...

PT-2021-12958

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 14.1X53-D53 Juniper Networks Junos OS versions 14.1R1 and later versions prior to 15.1R7-S6 Juniper Networks Junos OS versions prior to 15.1X53-D593 Juniper Networks Junos OS versions prior to...

PT-2021-12936

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 18.2R3-S8 on ACX5448 Juniper Networks Junos OS versions prior to 18.3R3-S5 on ACX5448 Juniper Networks Junos OS versions prior to 18.4R1-S6 on ACX5448 Juniper Networks Junos OS versions prior to...

CVE-2021-0248: Use of Hard-coded Credentials

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Junip...

PT-2021-12948

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 18.4 through 20.3 Juniper Networks Junos OS Evolved versions 18.4R1-EVO through 20.3R2-EVO Description: The issue is caused by an improper check for unusual or exceptional conditions in the Routing Protocol...