CVE-2021-0275 Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.

A Cross-site Scripting XSS vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining access to the users session. The other user session must be active for the attack to succeed. Once successful, the attacker has the same privileges as...

CVE-2021-0275

The CVE-2021-0275 entry identifies a Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web that can hijack another active user session and potentially grant full device control if the compromised user has root privileges. Affected are Junos OS versions across multiple series...

CVE-2021-0273 Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.

An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 devices with affected Trio line cards allows an attacker to exploit an interdependency in the PFE UCODE...

CVE-2021-0273

The CVE-2021-0273 issue affects Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200, MX10000, MX240, MX480, MX960 with Trio line cards. The root cause is an always-incorrect control flow in the implicit LT filter terms of the PFE UCODE, causing an infinite loop when processing certa...

CVE-2021-0271 Junos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core.

A Double Free vulnerability in the software forwarding interface daemon sfid process of Juniper Networks Junos OS allows an adjacently-connected attacker to cause a Denial of Service DoS by sending a crafted ARP packet to the device. Continued receipt and processing of the crafted ARP packets wil...

CVE-2021-0272 Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.

A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators FPCs on Juniper Networks Junos OS allows an attacker to send genuine packets destined to the device to cause a Denial of Service DoS to the device. On QFX10002-32Q, QFX10002-60C...

CVE-2021-0271

CVE-2021-0271 describes a Double Free vulnerability in the sfid process of Juniper Networks Junos OS. An adjacently-connected attacker can trigger a sustained Denial of Service by sending crafted ARP packets to specific EX-series devices (EX2200-C, EX3200, EX3300, EX4200, EX4500, EX4550, EX6210, ...

CVE-2021-0272

CVE-2021-0272 affects Juniper Networks Junos OS on QFX10002-32Q/60C/72Q and QFX10008/QFX10016; it is a kernel memory leak in FPCs that can be triggered by processing genuine packets in EVPN-VXLAN scenarios, enabling DoS with possible device crashes/restarts on affected models. Public documents co...

CVE-2021-0270

CVE-2021-0270 impacts Juniper Networks Junos OS on PTX Series and QFX10K Series when the inline-Jflow feature is enabled. The issue is described as a use-after-free in the Packet Forwarding Engine (PFE) microkernel, leading to a DoS through restarting one or more FPCs and generating core files du...

CVE-2021-0269

The CVE-2021-0269 entry concerns Juniper Networks Junos OS J-Web. The root cause is improper handling of client-side parameters, allowing an authenticated attacker to supersede or modify HTTP/S session parameters, bypass input validation rules, and alter J-Web behavior. Potential consequences inc...

CVE-2021-0267

Summary: CVE-2021-0267 is an input validation flaw in JDHCPD’s DHCP Relay Agent (active-lease query) in Juniper Junos OS. An attacker can trigger a crash of the jdhcpd DHCP service by sending a crafted DHCP packet, causing a Denial of Service. Affected Junos OS versions include 19.4 before 19.4R3...

CVE-2021-0268

CVE-2021-0268 concerns Juniper Networks Junos OS J-Web, due to an Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Response Splitting). The weakness can cause buffer overflows or segment faults and, per sources, may enable cross-site scripting (XSS) and cookie manipulation, with th...

CVE-2021-0268 Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.

An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, which allows an attacker to modify the integrity of the device and exfiltration information from the...

CVE-2021-0267 Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

CVE-2021-0266 cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

CVE-2021-0266

CVE-2021-0266 affects Juniper Networks Junos OS on cSRX Series. The root cause is the use of multiple hard-coded cryptographic keys in cSRX deployments, enabling an attacker to take control of any instance via device management services. Reported affected versions include all prior to 20.2R3, 20....

CVE-2021-0264 Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

CVE-2021-0264

CVE-2021-0264 describes a DoS vulnerability in Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards and PTX10003/PTX10008 devices. When a firewall filter term containing a syslog action is hit (configured on lo0 or a physical interface), the affected line card may crash and restart,...

CVE-2021-0263

Summary: CVE-2021-0263 describes a DoS in Juniper Junos OS PTX Series caused by heavy J-Flow sampling churn in the Multi-Service process (multi-svcs) on the FPC, which can stall the KRT queue and halt updates, impacting traffic forwarding. Affected component is the Multi-Service process running o...

CVE-2021-0263 Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled

A Data Processing vulnerability in the Multi-Service process multi-svcs on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service DoS condition . The...