CVE-2022-22193

An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. Continued execution of this command might cause a sustained...

CVE-2022-22191

A Denial of Service DoS vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast domain, may allow an unauthenticated network-adjacent attacker to trigger a PFEMAN watchdog timeout, causing the Packet...

CVE-2022-22188

An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine PFE of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial of Service DoS. The device must be configur...

CVE-2022-22183

An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker who is able to connect to a specific open IPv4 port, which in affected releases should otherwise be unreachable, to cause the CPU to consume all resources as more traffic ...

CVE-2022-22182

A Cross-site Scripting XSS vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects: Juniper Networks Junos OS 12....

CVE-2022-22194

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. Continued receipt of these crafted packets will...

CVE-2022-22196

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service DoS. The rpd CPU spikes to 100%...

CVE-2022-22198

An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service DoS. Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX...

PT-2022-6699

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.3R3-S11 Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S13, 17.4R3-S4 Juniper Networks Junos OS versions 18.3 prior to 18.3R3-S4 Juniper Networks Junos OS versions 18.4 prior to 18.4R1-S8...

PT-2022-6706

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S1-EVO Juniper Networks Junos OS Evolved version 21.1 versions prior to 21.1R3-EVO Juniper Networks Junos OS Evolved version 21.2 versions prior to 21.2R3-EVO Juniper Networks Junos OS...

PT-2022-5200

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3R12-S19 Juniper Networks Junos OS versions prior to 15.1R7-S10 Juniper Networks Junos OS versions prior to 18.3R3-S5 Juniper Networks Junos OS versions prior to 18.4R2-S10 Juniper Networks Junos ...

PT-2022-5199

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.3R3-S5 Juniper Networks Junos OS 18.4 versions prior to 18.4R3-S9 Juniper Networks Junos OS 19.1 versions prior to 19.1R3-S6 Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S3 Juniper...

PT-2022-6696

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions 18.3 through 18.3R3-S6 Juniper Networks Junos OS on SRX Series versions 18.4 through 18.4R3-S10 Juniper Networks Junos OS on SRX Series versions 19.1 through 19.1R3-S7 Juniper Networks Junos OS ...

Juniper Junos OS DoS (JSA11239)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11239 advisory. On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon RPD crash and...

Juniper Junos OS Privilege Escalation (JSA11237)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11237 advisory. An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the...

Juniper Junos OS Spoofing (JSA11240)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11240 advisory. - An Improper Input Validation vulnerability in routing process daemon RPD of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public K...

Juniper Junos OS Path Traversal Vulnerability

A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN DVPN, Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning ZTP allows an unauthenticated attacker to perform remote code execution...

Juniper Junos OS Improper Certificate Validation (JSA11264)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11264 advisory. An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle PitM attacks when a system script is fetched...

Juniper Junos OS Vulnerability (JSA11189)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11189 advisory. - In a Segment Routing ISIS SR-ISIS/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algorithm for Segment Routing...

Juniper Junos OS Vulnerability (JSA11246)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11246 advisory. - In broadband environments, including but not limited to Enhanced Subscriber Management, CHAP, PPP, DHCP, etc., on Juniper Networks Junos OS devices where RADIUS servers ar...