CVE-2021-0252 Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation

NFX Series devices using Juniper Networks Junos OS are susceptible to a local code execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon JDMD process. This issue affects Juniper Networks Junos OS on NFX Series: 18.1 version 18.1R1...

CVE-2021-0251

CVE-2021-0251 describes a NULL pointer dereference in Juniper Networks Junos OS CPCD daemon (cpcd) on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC. The flaw allows an attacker to send malformed HTTP packets that crash mspmand and related services, causing a sustained DoS and login denial whil...

CVE-2021-0251 Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets

A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery CPCD services daemon cpcd of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC allows an attacker to send malformed HTTP packets to the device thereby causing a Denial of Service DoS,...

CVE-2021-0249

CVE-2021-0249 is a buffer overflow in Juniper Networks Junos OS Packet Forwarding Engine (PFE) on SRX Series devices. Affected releases include SRX Series: 15.1X49 prior to 15.1X49-D190; 17.4 prior to 17.4R2-S9; 17.4R3 and later prior to 18.1R3-S9; 18.2 prior to 18.2R3-S1; 18.3 prior to 18.3R2-S3...

CVE-2021-0250 Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...

CVE-2021-0249 Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to...

CVE-2021-0250

CVE-2021-0250 is a vulnerability in Juniper Networks Junos OS (and Junos OS Evolved) where, in SRTE/BGP monitoring contexts, processing a crafted BGP update message can cause the Routing Protocol Daemon (RPD) to core, leading to a DoS. Affected: Junos OS versions 17.4R1 and later before 17.4R2-S6...

CVE-2021-0248

CVE-2021-0248 affects Juniper Networks Junos OS on NFX Series devices where a hard-coded credential flaw allows an attacker to take over any instance of an NFX deployment . The vulnerability is exploitable only via administrative interfaces . Affected scope is Junos OS versions prior to 19.1R1 on...

CVE-2021-0248 NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Junip...

CVE-2021-0247 Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.

A Race Condition Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in the firewall process dfwd of Juniper Networks Junos OS allows an attacker to bypass the firewall rule sets applied to the input loopback filter on any interfaces of a device. This issue is...

CVE-2021-0246

CVE-2021-0246 affects Juniper Networks Junos OS on SRX1500/SRX4100/SRX4200/SRX4600/SRX5000 Series with SPC2/SPC3 in multi-tenant deployments. The root cause is incorrect default permissions assigned to tenant system administrators, which may allow a tenant to send their traffic to other tenants w...

CVE-2021-0247

CVE-2021-0247 describes a race condition in Juniper Networks Junos OS dfwd (firewall process) that can allow bypass of firewall rules on the input loopback filter across multiple Junos releases (QFX/PTX series; multiple versions across 14.x–19.x). The underlying issue is concurrent execution with...

CVE-2021-0246 Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect default permissions assigned to tenant system administrators a tenant system administrator may inadvertently send their network traffic to one or more...

CVE-2021-0245

CVE-2021-0245 affects Juniper Networks Junos OS on Junos Fusion satellite devices, with a root cause of hard-coded credentials that allow a locally authenticated attacker to elevate privileges and take control. Affected ranges include multiple Junos OS revisions for Junos Fusion Satellite Devices...

CVE-2021-0245 Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.

A Use of Hard-coded Credentials vulnerability in Juniper Networks Junos OS on Junos Fusion satellite devices allows an attacker who is local to the device to elevate their privileges and take control of the device. This issue affects: Juniper Networks Junos OS Junos Fusion Satellite Devices. 16.1...

CVE-2021-0244

CVE-2021-0244 describes a signal handler race condition in the Layer 2 Address Learning Daemon (L2ALD) of Juniper Networks Junos OS that may allow an attacker to bypass storm-control on devices. Affected software ranges across multiple Junos OS branches and versions, including EX Series, SRX Seri...

CVE-2021-0243 Junos OS: EX4300: Stateless firewall policer fails to discard traffic

Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limits, possibly leading to a limited Denial of Service DoS condition. When the firewall policer discard action fails on a Layer 2 port, it wi...

CVE-2021-0244 Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition

A signal handler race condition exists in the Layer 2 Address Learning Daemon L2ALD of Juniper Networks Junos OS due to the absence of a specific protection mechanism to avoid a race condition which may allow an attacker to bypass the storm-control feature on devices. This issue is a corner case...

CVE-2021-0243

CVE-2021-0243 affects Juniper Networks Junos OS on the EX4300, where the firewall policer’s discard action can fail on a Layer 2 port, allowing traffic to pass and be forwarded even when policer limits are exceeded. This impacts IPv4 policing (not IPv6 or firewall policing actions) and can manife...

CVE-2021-0242 Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured

A vulnerability due to the improper handling of direct memory access DMA buffers on EX4300 switches on Juniper Networks Junos OS allows an attacker sending specific unicast frames to trigger a Denial of Service DoS condition by exhausting DMA buffers, causing the FPC to crash and the device to...