Authentication flaw

On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without any password. This issue might only occur in certain scenarios: • At the first reboot after performing device factory reset using the command...

Design/Logic Flaw

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

Authorization

The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these default credentials by the administrator, an attacker could exploit these credentials and access the vMX instance without authorization. This issue...

Design/Logic Flaw

A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service DoS by sending specific packets requiring special processing in microcode that the flow cache can't handle, causing the riot forwarding daemon to crash. By continuously sending...

Design/Logic Flaw

When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance Ethernet OAM packet to a target device, it may improperly handle the incoming malformed data and fail to sanitize this incoming data resulting in an overflow condition. This overflow condition in Juniper...

CVE-2020-1639 Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.

When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance Ethernet OAM packet to a target device, it may improperly handle the incoming malformed data and fail to sanitize this incoming data resulting in an overflow condition. This overflow condition in Juniper...

CVE-2020-1639

Affected product: Juniper Networks Junos OS. Issue: processing of specially crafted Ethernet OAM packets causes the CFM daemon to overflow due to improper handling of malformed data, leading to a Denial of Service (DoS) by crashing the CFM process; continued packet receipt can extend the DoS. Aff...

CVE-2020-1637

CVE-2020-1637 concerns a bypass of Unified Access Control (UAC) on Juniper Networks SRX Series running Junos OS Enforcer. The root cause is when the Infranet Controller IP range is configured as an IP address range instead of an IP address/netmask, which can allow a user to access network resourc...

CVE-2020-1638

The CVE-2020-1638 issue affects Juniper Junos OS and Junos OS Evolved FPCs in MX Series (MPC10E/MPC11E) and PTX10001/PTX10003 lines, where processing a specific IPv4 packet can trigger an FPC restart and drop all traffic via the FPC, causing a sustained DoS. Affected ranges include: Junos OS on M...

CVE-2020-1634 Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1630

CVE-2020-1630 affects Juniper Networks Junos OS on devices configured with dual Routing Engines, Virtual Chassis, or HA clusters. A local, authenticated low-privilege user with shell access can perform unauthorized configuration changes. The issue does not impact single-RE or stand-alone Junos OS...

CVE-2020-1634

CVE-2020-1634 affects Junos OS on High-End SRX Series: certain configurations allow a SPC receiving genuine multicast traffic to core, causing all FPCs in the chassis to reset and resulting in a Denial of Service. Affected versions include Junos OS 12.3X48-D80 and later, up to but not including 1...

CVE-2020-1630 Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.

A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual Routing Engines RE, Virtual Chassis VC or high-availability cluster may allow a local authenticated low-privileged user with access to the shell to perform unauthorized configuration modification. This...

CVE-2020-1628

Juniper Junos OS on EX4300 is affected by an information exposure vulnerability (CVE-2020-1628) due to use of the 128.0.0.0/2 internal subnet for RE–PFE communications, which may cause packets to leak configuration details (e.g., heartbeats, kernel versions) to the Internet. Affected are multiple...

CVE-2020-1629 Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.

A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon RPD process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11;...

CVE-2020-1629

CVE-2020-1629 describes a race-condition vulnerability in Juniper Networks Junos OS where the Routing Protocol Daemon (RPD) may crash and restart while processing a BGP NOTIFICATION message. Affected versions include Junos OS 16.1 prior to 16.1R7-S6; 16.2 prior to 16.2R2-S11; 17.1 prior to 17.1R2...

CVE-2020-1628 Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces

Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an EX4300 switch, leaking configuration information such as heartbeats, kernel versions, etc. out to the Internet,...

CVE-2020-1627

The CVE-2020-1627 issue affects Juniper Networks Junos OS on vMX and MX150, where crafted packets trigger special microcode processing that overwhelms the flow cache, causing the riot forwarding daemon to crash and a DoS. Affected releases include 18.1 before 18.1R3, 18.2 before 18.2R3, 18.2X75 b...

CVE-2020-1626

CVE-2020-1626 affects Juniper Networks Junos OS Evolved prior to 19.1R1-EVO. A DoS can be triggered by a high-rate sequence of specific packets that crashes the pfemand process (responsible for packet forwarding), causing sustained availability impact. The issue is traffic-triggered and only affe...

CVE-2020-1627 Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing

A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service DoS by sending specific packets requiring special processing in microcode that the flow cache can't handle, causing the riot forwarding daemon to crash. By continuously sending...