CVE-2020-1628: Exposure of Sensitive Information to an Unauthorized Actor

Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an EX4300 switch, leaking configuration information such as heartbeats, kernel versions, etc. out to the Internet,...

CVE-2020-1613: Improper Adherence to Coding Standards

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

CVE-2020-1625: Uncontrolled Resource Consumption

The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated Routing and Bridging IRB is configured with multiple underlay physical interfaces, and one interface flaps. This memory leak can affect running daemons processes, leading to an...

CVE-2020-1629: Race Condition within a Thread

A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon RPD process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11;...

CVE-2020-1615: Use of Hard-coded Credentials

The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these default credentials by the administrator, an attacker could exploit these credentials and access the vMX instance without authorization. This issue...

PT-2020-4138

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 16.1 through 16.1R7-S5 Juniper Networks Junos OS versions 16.2 through 16.2R2-S10 Juniper Networks Junos OS versions 17.1 through 17.1R2-S10 Juniper Networks Junos OS versions 17.2 through 17.2R1-S8 Juniper...

PT-2020-4095

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 12.3X48-D80 through 12.3X48-D95 on High-End SRX Series Description: The issue affects High-End SRX Series devices, in specific configurations, and when specific networking events or operator actions occur, a...

Junos OS Firewall Filters Failure Vulnerability (JSA10942)

The version of Junos OS installed on the remote host is EX3400 Series running Junos OS prior to 14.1X53-D115, 17.1R3, 17.2R3-S2, 17.3R3-S3, 17.4R2-S5, 18.1R3-S1, 18.2R2, or 18.3R2. It is, therefore, affected by a vulnerability. When a firewall filter is applied on the loopback interface, other...

The vulnerability in the J-Web web interface of the JunOS operating system allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability in the J-Web web interface of the JunOS operating system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Broadband Edge service in the Junos OS router MX Series allows a attacker to cause a service failure.

The vulnerability of the Broadband Edge service on Junos OS routers of the MX Series exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2015-3006 Junos: QFX Series: Insufficient entropy on QFX3500 and QFX3600 platforms when the system boots up

On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOMINTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for...

CVE-2015-5361 Junos: FTPS through SRX opens up wide range of data channel TCP ports

Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data channel. These related sessions gates are specific to source and destination IPs and ports of client and server. The design intent of the...

Exploit for Stack-based Buffer Overflow in Juniper Junos

inetutils hasn't been updated in 5 years, and neither has the of...

Juniper JSA10979

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the JSA10979 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version numbe...

Junos OS Multiple vulnerabilities (JSA10981)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities: - When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable...

Junos OS: Improper handling of specific IPv6 packets (JSA10982)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability DDOS: Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. A remote unauthenticated attacker can exploit this by sending...

CVE-2014-6447

Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...

Cross site scripting

Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...

CVE-2014-6447

Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...

CVE-2014-6447

CVE-2014-6447 affects Juniper Networks Junos J-Web error handling, causing potential XSS or J-Web DoS. Affected Junos OS versions include: 12.1X44 (before 12.1X44-D45), 12.1X46 (before 12.1X46-D30), 12.1X47 (before 12.1X47-D20), 12.3 (before 12.3R8), 12.3X48 (before 12.3X48-D10), 13.1 (before 13....