PT-2019-3619

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1X49-D180 Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S7 Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S8, 17.4R3 Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S8...

PT-2019-3869

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R1 on NFX Series. Description The issue is caused by insufficient input validation, allowing a malicious local attacker to elevate their permissions and execute commands outside their authorized scope of control,...

PT-2019-3896

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D110 on vSRX, SRX1500, SRX4000 Series Junos OS versions prior to 15.1X53-D234 on QFX5110, QFX5200 Series Junos OS versions prior to 15.1X53-D68 on QFX10K Series Junos OS versions prior to 17.1R2-S8, 17.1R3, o...

PT-2019-4187

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1F6-S12 Junos OS versions 16.1R6 through 16.1R6-S6 Junos OS versions 16.1R7 through 16.1R7-S3 Junos OS versions prior to 17.1R3 Junos OS versions 17.2R1-S3 through 17.2R3-S1 Junos OS versions 17.3R1-S1 through...

PT-2019-3482

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D80 on SRX Series. Description A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allows an attacker to fully compromise the host system. A local authenticated user can...

PT-2019-3480

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.1R2-S4, 18.1R3-S5 Junos OS version 18.1X75-D10 and later versions Junos OS versions prior to 18.2R1-S5, 18.2R2-S3, 18.2R3 Junos OS versions prior to 18.2X75-D50 Junos OS versions prior to 18.3R1-S4, 18.3R2, 18.3R3...

PT-2019-3594

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D170 on SRX1500 Junos OS versions prior to 17.3R3-S7 on SRX1500 Junos OS versions prior to 17.4R2-S8, 17.4R3 on SRX1500 Junos OS versions prior to 18.1R3-S8 on SRX1500 Junos OS versions prior to 18.2R3 on...

PT-2019-3868

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.1X46-D86 Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S13 Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D80 Juniper Networks Junos OS 14.1X53 versions prior to 14.1X53-D5...

Juniper Junos CVE-2019-0061 Local Privilege Escalation Vulnerability

Description Juniper Junos is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. The following versions of Juniper Junos are affected: Junper Junos 15.1X49 versions prior to 15.1X49-D171 and 15.1X49-D180 Junper Junos 15.1X53...

PT-2019-3478

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D61 Juniper Networks Junos OS versions prior to 15.1X49-D130 Juniper Networks Junos OS versions prior to 17.3R3 Juniper Networks Junos OS versions prior to 17.4R2 Description A vulnerability ...

Juniper Junos CVE-2019-0058 Local Privilege Escalation Vulnerability

Description Juniper Junos is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Juniper Junos 12.3X48 versions prior to 12.3X48-D80 are vulnerable Technologies Affected Juniper Junos 12.3X48 Juniper Junos 12.3X48-D10 Juniper...

Juniper Junos CVE-2019-0067 Denial of Service Vulnerability

Description Juniper Junos is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected device, denying service to legitimate users. Technologies Affected Juniper Junos 16.1 Juniper Junos 16.1R1 Juniper Junos 16.1R2 Juniper Junos 16.1R3 Juniper Junos...

PT-2019-3481

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5. Description An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device...

PT-2019-3485

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D171, 15.1X49-D180 Junos OS versions prior to 15.1X53-D496, 15.1X53-D69 Junos OS versions prior to 16.1R7-S4 Junos OS versions prior to 16.2R2-S9 Junos OS versions prior to 17.1R3 Junos OS versions prior to...

CVE-2019-0075: Undefined Security Weakness

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

CVE-2019-0070: Improper Input Validation

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...

CVE-2019-0057: Undefined Security Weakness

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager JDM application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1,...

CVE-2019-0054: Improper Certificate Validation

An Improper Certificate Validation weakness in the SRX Series Application Identification app-id signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle MitM attacks which may compromise the integrity and confidentiality of the device. This issue affect...

CVE-2019-0069: Cleartext Transmission of Sensitive Information

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

CVE-2019-0067: Undefined Security Weakness

Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart vmcore. By continuously sending a specially crafted IPv6 packet, an attacker can repeatedly crash the system causing a prolonged Denial of Service DoS. This issue affects Juniper Networks Jun...