Juniper Networks SRX DoS

The vulnerability of flow processing demons in Juniper Networks Junos OS routers of the SRX series is related to the re-release of memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted packets...

Juniper Networks’ Junos OS Evolved Object Flooding Protocol DoS

The vulnerability of the Object Flooding Protocol OFP in Juniper Networks’ Junos OS Evolved operating systems is related to improper handling of syntactically incorrect structures. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted TCP...

Juniper Networks PTX DoS

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos routers of the PTX series is related to improper elimination of equivalent special elements. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Networks Junos OS Data Compromise Bypass

The vulnerability of the user interface of Juniper Networks Junos OS routers in the MX and EX9200 series is related to an improperly implemented payload-protocol function. Exploiting this vulnerability allows a remote attacker to influence the integrity of the protected information...

Juniper Networks Non-Stop Routing DoS

The vulnerability of the Non-Stop Routing NSR routing mechanism in Juniper Networks’ Junos OS lies in the incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions...

Juniper Networks Junos OS Evolved Pointer Aliasing DoS

The vulnerability of Juniper Networks Junos OS Evolved routers from the ACX7024, ACX7100-32C, and ACX7100-48L series is related to pointer swapping errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Demon Routing Protocol Daemon RCE

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Demon Routing Protocol Daemon RCE

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially craft...

Juniper Networks Junos OS DoS

The vulnerability of Juniper Networks Junos OS routers in the MX series is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Networks SRX Flowd DoS

The vulnerability of the flow processing daemon flowd in Juniper Networks’ Junos routers of the SRX series arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Juniper Networks’ Junos Packet Forwarding Engine DoS

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos routers of the MX series is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Juniper Networks’ Junos Packet Forwarding Engine Confidential Data Access

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Juniper Networks’ Junos Packet Forwarding Engine DoS

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to improper validation of syntax correctness in input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

J-Web Interface Code Execution

The vulnerability of the J-Web interface on Juniper Networks Junos OS operating systems on SRX and EX devices is related to the ability to write beyond the buffer boundaries into memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

Juniper Networks has released updates to fix a critical remote code execution RCE vulnerability in its SRX Series firewalls and EX Series switches. The issue, tracked as CVE-2024-21591, is rated 9.8 on the CVSS scoring system. "An out-of-bounds write vulnerability in J-Web of Juniper Networks Jun...

CVE-2024-21616

An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On all Junos OS MX Series and SRX Series platforms, when SIP ALG is enabled, and a...

CVE-2024-21617

An Incomplete Cleanup vulnerability in Nonstop active routing NSR component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak leading to Denial of Service DoS. On all Junos OS platforms, when NSR is enabled, a BGP flap will cause memory leak. A manual...

CVE-2024-21617

An Incomplete Cleanup vulnerability in Nonstop active routing NSR component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak leading to Denial of Service DoS. On all Junos OS platforms, when NSR is enabled, a BGP flap will cause memory leak. A manual...

CVE-2024-21616

An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On all Junos OS MX Series and SRX Series platforms, when SIP ALG is enabled, and a...

CVE-2024-21607

An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device. If the "tcp-reset" option is added to the "reject" action in an IPv6 filter which...