CVE-2025-30649: Improper Input Validation

An Improper Input Validation vulnerability in the syslog stream TCP transport of Juniper Networks Junos OS on MX240, MX480 and MX960 devices with MX-SPC3 Security Services Card allows an unauthenticated, network-based attacker, to send specific spoofed packets to cause a CPU Denial of Service DoS...

CVE-2025-30656: Improper Handling of Additional Special Element

An Improper Handling of Additional Special Element vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with MS-MPC, MS-MIC and SPC3, and SRX Series, allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If the SIP ALG processes...

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

Juniper Networks Junos OS Memory Leak DoS

The vulnerability of Juniper Networks Junos OS routers in the MX-SPC3 series is related to improper memory release before deleting the last link “memory leak”. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Networks RSVP DoS

The vulnerability of the RSVP protocol implementation in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Juniper Networks Routing Protocol Demon DoS

The vulnerability of the Routing Protocol Data rpd in Juniper Networks’ Junos OS and Junos OS Evolved operating systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending...

Juniper Networks J-Web Arbitrary Command Execution

The vulnerability in the J-Web management web interface of Juniper Networks Junos OS relates to the failure to neutralize data in XPath expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Juniper Networks iked DoS

The vulnerability of the Internet Key Exchange Protocol Daemon iked in Juniper Networks’ Junos OS-based routers of the SRX, MX-SPC3, and NFX350 series is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruption...

Juniper Networks’ Junos OS Evolved Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Juniper Networks Junos OS Evolved DoS

The vulnerability of Juniper Networks Junos OS Evolved operating system-based filtering services is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

Juniper Networks Junos OS Evolved DoS

The vulnerability of the Layer 2 Address Learning Daemon L2ALD in Juniper Networks’ Junos OS Evolved operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Juniper Junos OS Local Arbitrary Code Execution (JSA93446)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA93446 advisory: - An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the...

CVE-2025-21590

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affecte...

Juniper Networks Junos OS Kernel Spatial Partitioning Code Execution

The vulnerability of Juniper Networks Junos OS’s kernel is related to insufficient spatial partitioning. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted file...

Juniper Junos OS DoS (JSA88100)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88100 advisory. - An Out-of-Bounds Read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-24201link is external Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability CVE-2025-21590link is external Juniper Junos OS Improper Isolation or...

Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code...

CVE-2025-21590

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affecte...

CVE-2025-21590

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affecte...

CVE-2025-21590 Junos OS: An local attacker with shell access can execute arbitrary code

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affecte...