CVE-2021-0256: Execution with Unnecessary Privileges

A sensitive information disclosure vulnerability in the mosquitto message broker of Juniper Networks Junos OS may allow a locally authenticated user with shell access the ability to read portions of sensitive files, such as the master.passwd file. Since mosquitto is shipped with setuid permission...

PT-2021-12956

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Junos Fusion Satellite Devices versions prior to 16.1R7-S7 Juniper Networks Junos OS Junos Fusion Satellite Devices versions 17.1 prior to 17.1R2-S12, 17.1R3-S2 Juniper Networks Junos OS Junos Fusion Satellite Device...

PT-2021-12965

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1X49-D240 Junos OS versions prior to 17.3R3-S11 Junos OS versions prior to 17.4R3-S4 Junos OS versions prior to 18.1R3-S12 Junos OS versions prior to 18.2R3-S7 Junos OS versions prior to 18.3R3-S4 Junos OS versio...

PT-2021-12962

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on NFX Series versions 18.1R1 through 18.2R3-S5 Juniper Networks Junos OS on NFX Series versions 18.3 through 18.3R3-S3 Juniper Networks Junos OS on NFX Series versions 18.4 through 18.4R3-S4 Juniper Networks Junos O...

PT-2021-12980

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.3R3-S9 Junos OS versions 17.4 prior to 17.4R3-S2 Junos OS versions 18.1 prior to 18.1R3-S11 Junos OS versions 18.2 prior to 18.2R3-S5 Junos OS versions 18.3 prior to 18.3R3-S3 Junos OS versions 18.4 prior to...

PT-2021-12958

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 14.1X53-D53 Juniper Networks Junos OS versions 14.1R1 and later versions prior to 15.1R7-S6 Juniper Networks Junos OS versions prior to 15.1X53-D593 Juniper Networks Junos OS versions prior to...

PT-2021-12936

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 18.2R3-S8 on ACX5448 Juniper Networks Junos OS versions prior to 18.3R3-S5 on ACX5448 Juniper Networks Junos OS versions prior to 18.4R1-S6 on ACX5448 Juniper Networks Junos OS versions prior to...

CVE-2021-0248: Use of Hard-coded Credentials

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Junip...

CVE-2021-0224: Allocation of Resources Without Limits or Throttling

A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber BRAS nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon ANCPD to crash and restart, leading to a Denial of Service DoS...

PT-2021-12977

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.4R3-S3 Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S12 Juniper Networks Junos OS 18.2 versions prior to 18.2R3-S6 Juniper Networks Junos OS 18.3 versions prior to 18.3R3-S4 Juniper...

CVE-2021-0246: Incorrect Default Permissions

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect default permissions assigned to tenant system administrators a tenant system administrator may inadvertently send their network traffic to one or more...

PT-2021-12935

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.3 through 17.3R3-S10 Juniper Networks Junos OS versions 17.4 through 17.4R2-S11 Juniper Networks Junos OS versions 17.4R3 through 17.4R3-S3 Juniper Networks Junos OS versions 18.1 through 18.1R3-S11 Junip...

CVE-2021-0252: Improper Neutralization of Special Elements used in a Command

NFX Series devices using Juniper Networks Junos OS are susceptible to a local code execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon JDMD process. This issue affects Juniper Networks Junos OS on NFX Series: 18.1 version 18.1R1...

PT-2021-12948

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 18.4 through 20.3 Juniper Networks Junos OS Evolved versions 18.4R1-EVO through 20.3R2-EVO Description: The issue is caused by an improper check for unusual or exceptional conditions in the Routing Protocol...

PT-2021-12971

Name of the Vulnerable Software and Affected Versions: Junos OS versions 19.1R3-S1 through 19.1R3-S2 Junos OS versions 19.2R2 through 19.2R3-S0 Junos OS versions 20.2 through 20.2R1-S1 Description: A Use After Free vulnerability was identified in PFE packet processing on the QFX10002-60C switchin...

PT-2021-12979

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.3R12-S17 Juniper Networks Junos OS versions prior to 15.1R7-S8 Description: A Double Free issue in the software forwarding interface daemon sfid process allows an adjacently-connected attacker to...

PT-2021-12959

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R1 on NFX Series Description: The issue allows an attacker to take over any instance of an NFX deployment through the use of hard-coded credentials in Juniper Networks Junos OS. This issue is on...

PT-2021-12941

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.3R3-S9 Junos OS versions prior to 17.4R2-S11 Junos OS versions prior to 17.4R3-S2 Junos OS versions prior to 18.2R3-S5 Junos OS versions prior to 18.3R2-S4 Junos OS versions prior to 18.3R3-S3 Junos OS versions...

PT-2021-12974 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on cSRX Series versions prior to 20.2R3 Juniper Networks Junos OS on cSRX Series version 20.3 prior to 20.3R2 Juniper Networks Junos OS on cSRX Series version 20.4 prior to 20.4R2 Description: The issue in Juniper...

CVE-2021-0257: Uncontrolled Resource Consumption

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...