CVE-2018-0011

CVE-2018-0011 is a reflected XSS vulnerability in Junos Space management interface. The issue allows a remote authenticated user to inject web script or HTML, potentially steal session data/credentials and perform administrative actions on the Junos Space device. Connected sources (e.g., NVD entr...

Junos OS 12.1X46 SRX 210, 240, 650 series firewalls (KRACK)

The version of Juniper Junos OS installed on the remote host is affected by multiple vulnerabilities related to the KRACK attacks. This may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network. Note that Juniper's products do not support Fast BSS Transition...

The vulnerability of Juniper Networks’ Junos Space Network Management Platform, related to authentication procedures that lack sufficient safeguards, allows attackers to gain access to the system with privileged user privileges.

The vulnerability of Juniper Networks’ Junos Space Network Management Platform relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the system with privileged user privileges from a remote location...

The vulnerability of the Junos operating system’s IPv6 traffic processing service allows attackers to cause resource exhaustion and kernel failures.

The vulnerability of the Junos operating system’s IPv6 traffic processing service is related to resource management errors. Exploiting this vulnerability allows a malicious actor to remotely cause resource exhaustion and kernel failures through specially created IPv6 traffic...

The vulnerability of the connected authentication module (PAM) of the Junos operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Junos operating system’s authentication module PAM exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause failures in the “demons” that use PAM...

The vulnerability of the Junos operating system, related to the lack of measures for cleaning input data, allows a intruder to gain unauthorized access to the device.

The vulnerability of the Junos operating system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a local attacker to increase their privileges and gain full control over the device, by using specially crafted combinations of CLI commands and...

Juniper Junos Space 17.1 < 17.1R1 Patch v1 / 16.1 < 16.1R3 Authentication Bypass (JSA10824)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1 17.1R1.1 or 16.1 16.1R3, and is therefore affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104175;...

Juniper Junos Space < 17.1R1 Multiple Vulnerabilities (JSA10826)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1R1, and is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104100; scriptversion"1.7";...

Juniper Junos SRX Flowd Crash Vulnerability (JSA10811)

According to its self-reported version number, the remote Junos device is affected by a vulnerability where one or more ALGs enabled may cause a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104033;...

Juniper Junos DoS Vulnerability (JSA10821)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the express path feature that could cause the flowd process to crash. TRUSTED...

Juniper Junos Remote Execution Vulnerability (JSA10818)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the pluggable authentication module PAM of Juniper Networks Junos OS that may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as...

Juniper Junos SRX Flowd Crash Vulnerability (JSA10813)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in which a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid10403...

Juniper Junos BGP PDU Vulnerability (JSA10810)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the way the router receives a crafted BGP PDU. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104032; scriptversion"1.6";...

Juniper Junos DoS Telnet Vulnerability (JSA10817)

According to its self-reported version number, the remote Junos device is affected by two vulnerabilities in the telnetd service that may allow a remote unauthenticated attacker to cause a denial of service through memory and/or CPU consumption. TRUSTED...

Juniper Junos HTTPS Server Certificate AV Vulnerability (JSA10822)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in that the HTTPS server certificate is not verified before downloading anti-virus updates. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104041; scriptversion"1.7"...

Juniper Junos BGP Update Vulnerability (JSA10820)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the 'bgp-error-tolerance' feature that when enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. TRUSTED...

Juniper Junos FPC Crash Vulnerability (JSA10814)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the extended-statistics component that can cause the FPC to crash. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104035; scriptversion"1.6";...

Juniper Junos Kernel Vulnerability (JSA10816)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the loopback interface that could cause the kernel to hang. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104036; scriptversion"1.7";...

Juniper Junos OS Denial of Service Vulnerability

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability. An attacker could exploit this vulnerability to cause a denia...

Juniper Junos Space HTML Injection Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An HTML injection vulnerability exists in Juniper Junos Space versions prior to 17.1R1. A...