CVE-2018-0047

CVE-2018-0047 describes a persistent cross-site scripting (XSS) vulnerability in the UI framework used by Juniper Networks Junos Space Security Director. A remote attacker with authentication can inject persistent scripts that may exfiltrate information or perform actions as another user when oth...

CVE-2018-0044

An insecure SSHD configuration (PermitEmptyPasswords = yes) in Juniper Device Manager and the host OS on Juniper NFX Series devices allows remote unauthenticated access if any passwords are empty. Affected: Junos OS 18.1 versions prior to 18.1R4 on NFX Series. Root cause: SSHD permitting empty pa...

CVE-2018-0052

CVE-2018-0052 concerns Junos OS where, if RSH is enabled and PAM authentication is disabled, a remote unauthenticated attacker can obtain root access. RSH is disabled by default, and there is no documented CLI to enable it; an undocumented privileged command can enable RSH and disable PAM, exposi...

CVE-2018-0051

The CVE-2018-0051 issue is a Denial-of-Service in the SIP application layer gateway (ALG) of Junos OS, crashing MS-PIC, MS-MIC, MS-MPC, MS-DPC or the SRX flow daemon (flowd) when SIP ALG is enabled on NAT/stateful setups. Affected Junos OS releases include 12.1X46 (before D77), 12.3X48 (before D7...

CVE-2018-0047 Junos Space Security Director: XSS vulnerability in web administration

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security...

CVE-2018-0052 Junos OS: Unauthenticated remote root access possible when RSH service is enabled

If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can obtain root access to the device. RSH service is disabled by default on Junos. There is no documented CLI command to enable this service. However, an undocumented CLI command...

CVE-2018-0055

Summary: CVE-2018-0055 affects Junos OS devices that are configured to act as DHCP servers in Broadband Edge (BBE) environments. The vulnerability is in the jdhcpd daemon when processing specially crafted DHCPv6 messages; a remote attacker can repeatedly send such packets to crash jdhcpd, causing...

CVE-2018-0056

The CVE describes an issue in Juniper Networks Junos OS on MX Series devices with l2-backhaul VPN configured. The Layer 2 Address Learning Daemon (L2ALD) may crash when deleting a duplicate MAC address learned on two different interfaces if the entry is not found in the internal MAC address table...

CVE-2018-0045 Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration

Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a...

CVE-2018-0044 NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

CVE-2018-0063

CVE-2018-0063 affects Juniper Networks Junos OS 17.3R3, where the IP next-hop index database for the management interface can be flooded by ARP requests, exhausting the private IRI next-hop space and causing a sustained DoS. Once the next-hop database is full, no new next hops can be learned and ...

CVE-2018-0060 Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash

An improper input validation weakness in the device control daemon process dcd of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP address for itself. Junos devices are not...

PT-2018-1761

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 18.2R1 Description A reflected cross-site scripting issue in OpenNMS, included with Juniper Networks Junos Space, may allow the stealing of sensitive information or session credentials from Junos...

CVE-2018-0063: Uncontrolled Resource Consumption

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...

PT-2018-1752

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3X48-D70 Junos OS versions prior to 15.1X49-D140 Junos OS versions prior to 15.1R4-S9 Junos OS versions prior to 15.1R7-S1 Junos OS version 15.1F6 Junos OS versions prior to...

CVE-2018-0060: Improper Input Validation

An improper input validation weakness in the device control daemon process dcd of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP address for itself. Junos devices are not...

CVE-2018-0055: Improper Input Validation

Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband Edge BBE environment may result in a jdhcpd daemon crash. The daemon automatically restarts without intervention, but a continuous receipt of crafted DHCPv6 packets could leaded ...

CVE-2018-0053: Improper Authentication

An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without authentication when the system is initially booted up. Affected releases are Juniper Networks Junos OS: 15.1X49 versions...

CVE-2018-0045: Improper Input Validation

Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a...

CVE-2018-0056: Improper Input Validation

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon L2ALD daemon might crash when attempting to delete the duplicate MAC address when the...