Juniper Networks Junos OS Evolved security vulnerabilities

Juniper Networks Junos OS Evolved is an updated version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved, which is caused by a reference count update vulnerability in the Evolved kernel. An unauthenticated cyber attacker could cause a denial of...

CVE-2022-22183: Exposure of Sensitive Information to an Unauthorized Actor

An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker who is able to connect to a specific open IPv4 port, which in affected releases should otherwise be unreachable, to cause the CPU to consume all resources as more traffic ...

CVE-2022-22191: Insufficient Resource Pool

A Denial of Service DoS vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast domain, may allow an unauthenticated network-adjacent attacker to trigger a PFEMAN watchdog timeout, causing the Packet...

CVE-2022-22197: Operation on a Resource after Expiration or Release

An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker with an established BGP session to cause a Denial of Service DoS. This issue occurs when...

CVE-2022-22182: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects: Juniper Networks Junos OS 12....

CVE-2022-22195: Improper Update of Reference Count

An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a counter overflow, eventually causing a Denial of Service DoS. This issue affects Juniper Networks Junos OS Evolved: All versions...

CVE-2022-22181: Improper Neutralization of Input During Web Page Generation

A reflected Cross-site Scripting XSS vulnerability in J-Web of Juniper Networks Junos OS allows a network-based authenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web. This may allow the attacker to gain control of...

PT-2022-15289

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on the EX4300 versions prior to 15.1R7-S12 Juniper Networks Junos OS on the EX4300 version 18.4 versions prior to 18.4R2-S10, 18.4R3-S11 Juniper Networks Junos OS on the EX4300 version 19.1 versions prior to 19.1R3-S8...

PT-2022-15286

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 20.2R1 through 20.2R2 Description An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine PFE of Juniper Networks Junos OS allows a network-base...

PT-2022-15290

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 20.3R3-S1 Juniper Networks Junos OS versions 20.4 prior to 20.4R3 Juniper Networks Junos OS versions 21.1 prior to 21.1R3 Juniper Networks Junos OS versions 21.2 prior to 21.2R2 Juniper Networks Juno...

PT-2022-6700 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R2-S3-EVO Description: An Improper Check for Unusual or Exceptional Conditions issue in the packetIO daemon allows an unauthenticated, network-based attacker to cause a Denial of Service...

PT-2022-15291

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 19.3R3-S4 Juniper Networks Junos OS versions prior to 19.4R2-S6 Juniper Networks Junos OS versions prior to 19.4R3-S6 Juniper Networks Junos OS versions prior to 20.1R3-S2 Juniper Networks Junos OS...

CVE-2022-22198: Access of Uninitialized Pointer

An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service DoS. Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX...

CVE-2022-22185: Improper Check for Unusual or Exceptional Conditions

A vulnerability in Juniper Networks Junos OS on SRX Series, allows a network-based unauthenticated attacker to cause a Denial of Service DoS by sending a specific fragmented packet to the device, resulting in a flowd process crash, which is responsible for packet forwarding. Continued receipt and...

CVE-2022-22193: Improper Handling of Unexpected Data Type

An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. Continued execution of this command might cause a sustained...

CVE-2022-22188: Memory Allocation with Excessive Size Value

An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine PFE of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial of Service DoS. The device must be configur...

PT-2022-15292

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 20.4 through 20.4R3 Juniper Networks Junos OS versions 21.1 through 21.1R2-S1, 21.1R3 Juniper Networks Junos OS versions 21.2 through 21.2R2 Description An Access of Uninitialized Pointer issue in the SIP ALG...

PT-2022-15285

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on EX4650 Series versions prior to 19.1R3-S8 Juniper Networks Junos OS on EX4650 Series 19.2 versions prior to 19.2R3-S5 Juniper Networks Junos OS on EX4650 Series 19.3 versions prior to 19.3R3-S5 Juniper Networks Jun...

CVE-2022-22186: Improper Initialization

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface em0 but not destined to the device, may be improperly forwarded to an egress interface, instead of being discarded. Such traffic being sent by a client may...

CVE-2022-22186

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface em0 but not destined to the device, may be improperly forwarded to an egress interface, instead of being discarded. Such traffic being sent by a client may...