PT-2021-12970

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.3R12-S17 on EX Series Junos OS versions prior to 12.3X48-D105 on SRX Series Junos OS versions prior to 15.1R7-S8 Junos OS versions prior to 15.1X49-D230 on SRX Series Junos OS versions prior to 16.1R7-S8 Junos OS...

PT-2021-12955

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 14.1X53-D49 on EX Series Juniper Networks Junos OS versions prior to 15.1R7-S6 Juniper Networks Junos OS versions prior to 15.1X49-D191, 15.1X49-D200 on SRX Series Juniper Networks Junos OS versions...

PT-2021-12947

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on QFX5100-96S versions 17.3 prior to 17.3R3-S10 Juniper Networks Junos OS on QFX5100-96S versions 17.4 prior to 17.4R3-S4 Juniper Networks Junos OS on QFX5100-96S versions 18.1 prior to 18.1R3-S10 Juniper Networks...

CVE-2021-0214: Improper Input Validation

A vulnerability in the distributed or centralized periodic packet management daemon PPMD of Juniper Networks Junos OS may cause receipt of a malformed packet to crash and restart the PPMD process, leading to network destabilization, service interruption, and a Denial of Service DoS condition...

CVE-2021-0250: Undefined Security Weakness

In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...

PT-2021-12953 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on the EX4300 versions prior to 17.3R3-S11 Juniper Networks Junos OS on the EX4300 versions prior to 17.4R2-S13 Juniper Networks Junos OS on the EX4300 versions prior to 17.4R3-S4 Juniper Networks Junos OS on the...

CVE-2021-0255: Execution with Unnecessary Privileges

A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root use...

PT-2021-12942

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 16.1R1 through 17.3R3-S10 Juniper Networks Junos OS versions 17.4 through 17.4R2-S12 Juniper Networks Junos OS versions 18.1 through 18.1R3-S11 Juniper Networks Junos OS versions 18.2 through 18.2R2-S7 Junip...

CVE-2021-0234: Improper Initialization

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS Distributed Denial of Service settings when configured from the CLI. The DDoS...

CVE-2021-0259: Improper Handling of Exceptional Conditions

Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instability might be experienced in the underlay network as a consequence of exceeding the default ddos-protection aggregate threshold. If an attacker on ...

PT-2021-12969 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.2R1 through 17.4R2-S11 Juniper Networks Junos OS versions 17.3 through 17.3R3-S8 Juniper Networks Junos OS versions 17.4R2-S12 through 17.4R3-S4 Juniper Networks Junos OS versions 18.1 through 18.1R3-S12...

CVE-2021-0231: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4,...

PT-2021-12939

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions 19.1R1-EVO through 20.3R1-S1-EVO Juniper Networks Junos OS Evolved version 20.3R2-EVO Description: The issue is caused by an improper check for unusual or exceptional conditions, which may prevent th...

CVE-2021-0263: Undefined Security Weakness

A Data Processing vulnerability in the Multi-Service process multi-svcs on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service DoS condition . The...

PT-2021-12949

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions prior to 15.1R7-S9 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 17.3 prior to 17.3R3-S11...

CVE-2021-0275: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining access to the users session. The other user session must be active for the attack to succeed. Once successful, the attacker has the same privileges as...

PT-2021-12972

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on PTX Series versions 18.2 through 18.2R3-S7 Juniper Networks Junos OS on PTX Series versions 18.3 through 18.3R3-S4 Juniper Networks Junos OS on PTX Series versions 18.4 through 18.4R2-S8 Juniper Networks Junos OS ...

CVE-2021-0238: Uncontrolled Resource Consumption

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

PT-2021-12964 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1R7-S9 Juniper Networks Junos OS versions prior to 17.3R3-S11 Juniper Networks Junos OS versions prior to 17.4R2-S13 Juniper Networks Junos OS versions prior to 17.4R3-S4 Juniper Networks Junos O...

Vulnerabilities fixed in Juniper Junos OS

Juniper Networks has fixed multiple vulnerabilities in Junos OS and Junos OS Evolved for SRX and NFX series devices, among others. The vulnerabilities potentially enable a malicious party to execute attacks that result in the categories of damage. For each category, the CVE features that are...