CVE-2020-1603: Improper Adherence to Coding Standards

Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory leak occurs within the...

CVE-2020-1607: Improper Neutralization of Input During Web Page Generation

Insufficient Cross-Site Scripting XSS protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos device as the targeted user. This issue affects Juniper Networks Junos OS 12.3...

CVE-2020-1606: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issu...

CVE-2020-1609: Stack-based Buffer Overflow

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2014-6448: Improper Privilege Management

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

PT-2020-7727

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 Description The issue allows local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access. Recommendatio...

CVE-2020-1601: Undefined Security Weakness

Certain types of malformed Path Computation Element Protocol PCEP packets when received and processed by a Juniper Networks Junos OS device serving as a Path Computation Client PCC in a PCEP environment using Juniper's path computational element protocol daemon pccd process allows an attacker to...

CVE-2020-1600: Uncontrolled Resource Consumption

In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...

CVE-2020-1605: Stack-based Buffer Overflow

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1604: Improper Access Control

On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. This issue only affects firewall filter evaluation of certain packets destined to the device Routing Engine RE. This issue does...

Junos OS vulnerable to cross-site scripting

Overview Junos OS contains a cross-site scripting vulnerability CWE-79. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be...

JVN#07375820: Junos OS vulnerable to directory traversal

Junos OS contains a directory traversal vulnerability CWE-22. Impact Files on the server may be viewed or deleted by an authenticated J-web user. According to the developer, this issue does not affect system files that can be accessed only by root user. Solution Update the Software Update the...

PT-2020-1614

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 16.1R7-S6 Juniper Networks Junos OS 16.1 version 16.1X70-D10 and later Juniper Networks Junos OS 16.2 versions prior to 16.2R2-S11 Juniper Networks Junos OS 17.1 versions prior to 17.1R2-S11, 17.1R3-...

Juniper Networks Junos OS IPv6 Message Handling Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that arises from the program's failure to properly handle...

JVN#21753370: Junos OS vulnerable to cross-site scripting

Junos OS contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's J-Web screen. Solution Update the Software Update the software to the latest version according to the information provided by the developer. Apply a Workaround Applying...

PT-2020-1829

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3R12-S15 Junos OS 12.3X48 versions prior to 12.3X48-D86, 12.3X48-D90 Junos OS 14.1X53 versions prior to 14.1X53-D51 Junos OS 15.1F6 versions prior to 15.1F6-S13 Junos OS 15.1 versions prior to 15.1R7-S5 Junos OS...

PT-2020-1513

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D90 Juniper Networks Junos OS versions 15.1 prior to 15.1R7-S6 Juniper Networks Junos OS versions 15.1X49 prior to 15.1X49-D200 Juniper Networks Junos OS versions 15.1X53 prior to...

PT-2020-1510

Name of the Vulnerable Software and Affected Versions Junos OS versions 15.1 through 19.2 Junos OS Evolved versions prior to 19.3R1 Description The issue affects the Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved when configured in relay mode, allowing a...

PT-2020-1557

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 14.1X53-D12 on QFX5100 Series and EX4600 Series Junos OS versions prior to 14.1X53-D52 on QFX3500 Series Junos OS versions prior to 14.1X53-D48 on EX4300 Series Junos OS versions prior to 15.1R7-S3 on EX4300 Series...

PT-2020-1511

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1R7-S6 Junos OS versions 15.1X49 prior to 15.1X49-D200 Junos OS versions 15.1X53 prior to 15.1X53-D592 Junos OS versions 16.1 prior to 16.1R7-S6 Junos OS versions 16.2 prior to 16.2R2-S11 Junos OS versions 17.1...