PT-2020-4129

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 16.1R7-S6 Juniper Networks Junos OS versions prior to 17.1R2-S11, 17.1R3-S1 Juniper Networks Junos OS versions prior to 17.2R2-S8, 17.2R3-S3 Juniper Networks Junos OS versions prior to 17.2X75-D44...

PT-2020-4132

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.1R1 Description: The issue is related to insufficient protection of registration data in the EvoSharedObjStore component of the Junos OS Evolved operating system. A local, authenticated user with shell...

PT-2020-4136

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 18.1R3 on vMX and MX150 Juniper Networks Junos OS versions prior to 18.2R3 on vMX and MX150 Juniper Networks Junos OS versions prior to 18.2X75-D60 on vMX and MX150 Juniper Networks Junos OS version...

PT-2020-4140

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 12.3X48 prior to 12.3X48-D100 Juniper Networks Junos OS on SRX Series versions 15.1X49 prior to 15.1X49-D210 Juniper Networks Junos OS on SRX Series versions 17.3 prior to 17.3R2-S5, 17.3R3-S8...

PT-2020-4127

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.4R2-S9, 17.4R3 on PTX1000 and PTX10000 Series, QFX10000 Series Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S9 on PTX1000 and PTX10000 Series, QFX10000 Series Juniper Networks Junos OS...

PT-2020-4139

Name of the Vulnerable Software and Affected Versions: Junos OS versions 17.4 through 19.2R2 Description: A crafted NDPv6 packet could transit a Junos device configured as a Broadband Network Gateway BNG and reach the EVPN leaf node, causing a stale MAC address entry. This could cause legitimate...

PT-2020-4141

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.2R1-S4, 19.2R2, 19.3R2-S2, 19.3R3, 19.4R1-S1, 19.4R2 Junos OS Evolved versions prior to 19.4R2-EVO Description: The issue exists due to insufficient input validation in the FPC module of Junos OS and Junos OS...

PT-2020-4097

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 16.1R7-S6 Junos OS versions prior to 16.2R2-S11 Junos OS versions prior to 17.1R2-S11 Junos OS versions prior to 17.1R3-S2 Junos OS versions prior to 17.2R1-S9 Junos OS versions prior to 17.2R2-S8 Junos OS versions...

PT-2020-4128

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.1 through 17.1R2-S11 Juniper Networks Junos OS versions 17.1R3-S2 and earlier Juniper Networks Junos OS versions 17.2 through 17.2R3-S3 Juniper Networks Junos OS versions 17.3 through 17.3R2-S5 Juniper...

CVE-2020-1624: Insertion of Sensitive Information into Log File

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1...

CVE-2020-1634: Integer Overflow or Wraparound

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1623: Insertion of Sensitive Information into Log File

A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1...

PT-2020-4130

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1 Description: The issue is related to insufficient protection of registration data in the configd Streamer Log component of the JunOS Evolved operating system. Exploitation of this issue may allow an...

PT-2020-4131

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.3R1 Description: The issue is related to insufficient protection of registration data in the configd Trace Handler component of the JunOS Evolved operating system. It allows a local, authenticated user wi...

PT-2020-4134

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 19.1R1 Description: The issue is related to insufficient protection of registration data in the objmon configuration file of the JunOS Evolved operating system. Exploitation of this issue may allow an attack...

CVE-2020-1622: Improper Control of a Resource Through its Lifetime

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R1...

CVE-2020-1621: Improper Control of a Resource Through its Lifetime

A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1...

CVE-2020-1626: Undefined Security Weakness

A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service DoS by sending a high rate of specific packets to the device, resulting in a pfemand process crash. The pfemand process is responsible for packet forwarding on the device. By continuously sendi...

PT-2020-4137

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 14.1X53 through 14.1X53-D52 on EX4300 Juniper Networks Junos OS versions 15.1 through 15.1R7-S5 on EX4300 Juniper Networks Junos OS versions 15.1X49 through 15.1X49-D199 on EX4300 Juniper Networks Junos OS...

PT-2020-4092

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 16.1R7-S6 Juniper Networks Junos OS versions prior to 16.2R2-S11 Juniper Networks Junos OS versions prior to 17.1R2-S11, 17.1R3 Juniper Networks Junos OS versions prior to 17.2R1-S9, 17.2R3-S3 Junip...