Juniper Junos OS PTX/QFX Series: Unexpected Packet Forwarding Vulnerability (JSA11076)

The version of Junos OS installed on the remote host is PTX or QFX Series prior to 17.2X75-D105, 18.1R3-S11, 18.2R3-S5, 18.2X75-D420, 18.3R2-S4, 18.4R1-S7, 19.1R2-S2, 19.2R1-S5, 19.3R2-S3, 19.4R1-S2, or 20.1R1-S2. It is, therefore, affected by a vulnerability as referenced in the JSA11076 advisor...

Juniper Junos OS SRX Series: High CPU Load Utilization Vulnerability (JSA11081)

The version of Junos OS installed on the remote host is SRX Series prior to 12.3X48-D105, 15.1X49-D221, 17.4R3-S3, 18.1R3-S11, 18.2R3-S3, 18.3R2-S4, 18.4R2-S5, 19.1R2-S2, 19.2R1-S5, 19.3R3, or 19.4R2. It is, therefore, affected by a vulnerability as referenced in the JSA11081 advisory. Note that...

Juniper Junos SNMP DoS (JSA11080)

According to the self reported version of Junos OS on the remote device, the device is vulnerable to a denial of service vulnerability due to a memory leak. An unauthenticated, remote attacker can exploit this, by sending multiple of a specific SNMP OID poll, to consume increasing amounts of...

Juniper Junos MX/EX9200 Series: DDoS Vulnerability (JSA11062)

The version of Junos OS installed on the remote host is MX series or EX9200 series prior to 17.2R3-S4, 17.2X75-D102, 17.3R3-S8, 17.4R2-S11,18.2R2-S7, 18.2X75-D30, or 18.3R2-S4. It is, therefore, affected by a vulnerability as referenced in the JSA11062 advisory. Note that Nessus has not tested fo...

Juniper Junos OS: DoS Vulnerability (JSA11068)

The version of Junos OS installed on the remote host is prior to 17.4R2-S12, 18.1R3-S11, 18.2R3-S6, 18.2X75-D65, 18.3R2-S4, 18.4R2-S5, 19.1R3-S2, 19.2R1-S5, 19.3R2-S4, 19.4R1-S3, or 20.1R1-S3. It is, therefore, affected by a vulnerability as referenced in the JSA11068 advisory. Note that Nessus h...

Juniper Junos NFX350 Series Readable Password Hashes Vulnerability (JSA11066)

The version of Junos OS installed on the remote host is NFX350 Series prior to 19.4R3 or 20.1R1-S4. It is, therefore, affected by a vulnerability. This vulnerability allows a local attacker with access to brute-force decrypt password hashes stored on the system as referenced in the JSA11066...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-64000)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has a security vulnerability that can be exploited by an attacker to run code via the DHCPv6 relay agent usage...

Juniper Networks Junos OS Evolved Code Issue Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Juniper Networks Junos OS Evolved has a security vulnerability that can be exploited by an attacker to bypass restrictions and escalate his privileges by ignoring logout-disconnect...

Unspecified Vulnerability in Juniper Networks Junos OS (CNVD-2021-28793)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS contains a security vulnerability that can be exploited by an attacker to trigger a fatal error via jdhcpd,...

Unspecified Vulnerability in Juniper Networks Junos OS (CNVD-2021-28794)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability that can be exploited by an attacker to trigger a denial of...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-57866)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for use with Juniper Networks hardware devices. The operating system provides a secure programming interface and the Junos SDK.Junos OS Evolved is an upgraded version of Junos OS. Junos OS has a security vulnerabili...

Junos OS SRX/NFX Elevation of Privilege Vulnerability

The Junos OS SRX/NFX is a switch from Juniper Networks. A security vulnerability exists in the Junos OS SRX/NFX's handling of Web API private keys, which can be exploited by a remote attacker to submit a special request that can elevate privileges...

Juniper Networks Junos OS J-Web Cross-Site Scripting Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A cross-site scripting vulnerability exists in Juniper Networks Junos OS J-Web, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain...

Juniper Networks Junos OS MX Denial of Service Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A memory disclosure vulnerability exists in Juniper Networks Junos OS MX Handling NAT64 IPv6, which can be exploited by a remote attacker to submit a special request, which can be used in ...

Junos OS IPv6 Data Message Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Junos OS that can be exploited by an attacker to send malicious IPv6...

Juniper Networks Junos OS Resource Management Error Vulnerability (CNVD-2020-63214)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has a security vulnerability that can be exploited by an attacker to create a memory leak via EVPN to trigger a...

Juniper Networks Junos OS Evolved NDP Message Denial of Service Vulnerability

Juniper Networks Junos OS Evolved is a set of network operating systems dedicated to the company's hardware devices. Juniper Networks Junos OS Evolved suffers from a security vulnerability in the handling of NDP messages, which can be exploited by a remote attacker to submit a special request tha...

CVE-2020-1685

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol VXLAN, the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching...

CVE-2020-1686

On Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart vmcore. This issue can be trigged by a malformed IPv6 packet destined to the Routing Engine. An attacker can repeatedly send the offending packet resulting in an extended Denial of...

CVE-2020-1684

On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilization, which could lead to traffic interruption. Application identification is enabled by default and is automatically turned on when...