PT-2022-6699

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.3R3-S11 Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S13, 17.4R3-S4 Juniper Networks Junos OS versions 18.3 prior to 18.3R3-S4 Juniper Networks Junos OS versions 18.4 prior to 18.4R1-S8...

Juniper Junos OS Privilege Escalation (JSA11237)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11237 advisory. An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the...

Juniper Junos OS DoS (JSA11239)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11239 advisory. On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon RPD crash and...

Juniper Junos OS Spoofing (JSA11240)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11240 advisory. - An Improper Input Validation vulnerability in routing process daemon RPD of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public K...

Juniper Junos OS Path Traversal Vulnerability

A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN DVPN, Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning ZTP allows an unauthenticated attacker to perform remote code execution...

Juniper Junos OS Improper Certificate Validation (JSA11264)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11264 advisory. An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle PitM attacks when a system script is fetched...

Juniper Junos OS Vulnerability (JSA11189)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11189 advisory. - In a Segment Routing ISIS SR-ISIS/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algorithm for Segment Routing...

Juniper Junos OS Vulnerability (JSA11246)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11246 advisory. - In broadband environments, including but not limited to Enhanced Subscriber Management, CHAP, PPP, DHCP, etc., on Juniper Networks Junos OS devices where RADIUS servers ar...

The vulnerability of flow processing demons in Juniper Networks’ Junos OS-based SRX and MX routers allows a attacker to cause service interruptions.

The vulnerability of flow processing on Juniper Networks Junos OS routers of the SRX and MX series relates to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Juniper Junos OS DoS (JSA11274)

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability due to the routing protocol rdp daemon not properly validating data properly in BGP update messages. An unauthenticated, remote attacker can exploit this, by sending a malformed BGP update messag...

The vulnerability of Juniper Networks’ Junos OS, related to errors in the certificate validation process, allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of Juniper Networks’ Junos OS is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack by loading a specially created script...

The vulnerability of the Junos Fusion technology implementation in Juniper Networks’ Junos OS allows a attacker to trigger a service failure.

The vulnerability of the Junos Fusion technology implementation in Juniper Networks’ Junos OS lies in the insecure external control of critical data states. Exploiting this vulnerability could allow attackers to cause service failures...

The vulnerability of Juniper Networks Junos OS, an open-source infrastructure demon, allows a attacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS operating systems’ open-source infrastructure components relates to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of Juniper Networks Junos OS’s kernel allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending traffic through the system...

The vulnerability of the smgd subscriber management demon on Juniper Networks’ Junos OS-based MX router devices allows a attacker to cause a service failure.

The vulnerability of the smgd subscriber management daemon for Juniper Networks’ Junos OS routers in the MX series operating systems is related to improper handling of exceptions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the command-line interface (CLI) of Juniper Networks Junos OS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of Juniper Networks Junos OS is related to the leakage of information in error messages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Flexible PIC Concentrator module in Juniper Networks’ Junos OS-based ACX5448 routers allows a hacker to induce a service failure.

The vulnerability of the Flexible PIC Concentrator FPC module in Juniper Networks’ Junos OS-based ACX5448 routers lies in the fact that resources are not released after their useful life has expired. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of Juniper Networks Junos OS routers in the QFX5000 and EX4600 series, related to a memory release error, allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS routers in the QFX5000 and EX4600 series is related to a memory release error during the processing of incoming IPv6 packets. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the kernel of Juniper Networks Junos OS routers vMX and MX150 allows a hacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS routers vMX and MX150 lies in memory release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS lies in the fact that resources are not released after their useful life has expired. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted packe...