Juniper Junos OS Multiple Vulnerabilities (JSA69899)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69899 advisory. - An Improper Input Validation vulnerability in the J-Web component of Juniper Networks Junos OS may allow an unauthenticated attacker to access data without proper...

Juniper Networks Routing Protocol Daemon DoS

The vulnerability of the Routing Protocol Daemon RPD in Juniper Networks’ Junos OS operating systems is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow a malicious actor to cause service failures using the IPv6 network protocol...

Juniper Networks Junos OS EVPN BGP DoS

The vulnerability of the Border Gateway Protocol BGP implementation in the Ethernet VPN EVPN technology of Juniper Networks’ Junos OS and Junos OS Evolved is related to improper handling of unexpected types of data. Exploiting this vulnerability can allow a malicious actor to cause service...

Juniper Junos OS DoS (JSA69873)

The version of Junos OS installed on the remote host is affected by a denial of service DoS vulnerability. On QFX10000 Series devices using Juniper Networks Junos OS when configured as transit IP/MPLS penultimate hop popping PHP nodes with link aggregation group LAG interfaces, an Improper...

J-Web XSS

The vulnerability of the J-Web interface in Juniper Networks Junos OS operating systems is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Juniper Networks Packet Forwarding Engine Module Information Disclosure

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series is related to security vulnerabilities. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

Juniper Networks J-Web Unauthorized Access Command Execution

The vulnerability of the J-Web interface in Juniper Networks Junos OS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or execute arbitrary commands ...

J-Web XSS

The vulnerability of the J-Web interface in Juniper Networks Junos OS operating systems is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Juniper Networks Junos OS Evolved PTX DoS

The vulnerability of Juniper Networks Junos OS Evolved PTX router devices relates to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Networks Junos OS IP/MPLS DoS

The vulnerability of the IP/MPLS protocol implementation in Juniper Networks’ Junos OS-based QFX10000 routers stems from improper validation of certain indices, positions, or offsets in the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

Juniper Networks Junos OS Privilege Escalation

The vulnerability of the file system of Juniper Networks Junos OS router series cSRX lies in the way passwords are stored in a recoverable format. Exploiting this vulnerability can allow attackers to increase their privileges...

Juniper Networks MGD Privilege Escalation

The vulnerability of the Management Daemon MGD in Juniper Networks’ Junos OS Evolved operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Juniper Junos OS DoS (JSA69916)

The version of Junos OS installed on the remote host is affected by a DoS vulnerability as referenced in the JSA69916 advisory. A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to cause a Denial of...

Juniper Junos OS DoS (JSA69891)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69891 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an...

Juniper Junos OS Arbitrary Command Execution (JSA69905)

The version of Junos OS installed on the remote host is affected by an arbitrary command execution vulnerability as referenced in the JSA69905 advisory. An Incorrect Permission Assignment vulnerability in shell processing of Juniper Networks Junos OS Evolved allows a low-privileged local user to...

Juniper Junos OS DoS (JSA69915)

The version of Junos OS installed on the remote host is affected by a DoS vulnerability as referenced in the JSA69915 advisory. An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series allows a network-based,...

Juniper Junos OS Privilege Escalation (JSA69895)

The version of Junos OS installed on the remote host is affected by a privilege escalation vulnerability as referenced in the JSA69895 advisory. An Execution with Unnecessary Privileges vulnerability in Management Daemon mgd of Juniper Networks Junos OS Evolved allows a locally authenticated...

Juniper Junos OS Time-of-check Time-of-use (TOCTOU) Race Condition DoS (JSA69902)

The version of Junos OS installed on the remote host is affected by a DoS vulnerability as referenced in the JSA69902 advisory. A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS, Junos OS Evolved allows a network-based...

Juniper Junos OS DoS (JSA69898)

The version of Junos OS installed on the remote host is affected by a DoS vulnerability as referenced in the JSA69898 advisory due to the Improper Handling of an Unexpected Data Type in the processing of EVPN routes on Juniper Networks Junos OS and Junos OS Evolved. An attacker in direct control ...

CVE-2022-22244

An XPath Injection vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker sending a crafted POST to reach the XPath channel, which may allow chaining to other unspecified vulnerabilities, leading to a partial loss of confidentiality. This issue affect...