PT-2018-1755

Name of the Vulnerable Software and Affected Versions Junos versions prior to 14.1X53-D47 Junos versions prior to 15.1R7 Junos versions prior to 15.1R8 Junos versions prior to 15.1X53-D233 Junos versions prior to 16.1R7 Junos versions prior to 16.2R3 Junos versions prior to 17.1R2-S9 Junos versio...

PT-2018-8592

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.1X46-D40 on SRX Series Juniper Networks Junos OS versions prior to 12.3X48-D20 on SRX Series Juniper Networks Junos OS versions prior to 14.1X53-D40 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX430...

PT-2018-8588

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1R7-S1 on MX Series Junos OS versions prior to 16.1R4-S12 on MX Series Junos OS versions prior to 16.1R6-S6 on MX Series Junos OS versions prior to 16.2R2-S7 on MX Series Junos OS versions prior to 17.1R2-S9 on M...

PT-2018-8594

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D60 Junos OS versions prior to 15.1R7 Junos OS version 15.1F6 Junos OS versions prior to 15.1X49-D120 Junos OS versions prior to...

PT-2018-8593

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D81 on SRX Series Junos OS versions prior to 12.3R12-S11 Junos OS versions prior to 12.3X48-D80 on SRX Series Junos OS versions prior to 15.1R7 Junos OS versions prior to 15.1X49-D150 Junos OS versions prior...

PT-2018-1749

Name of the Vulnerable Software and Affected Versions Junos OS versions 17.2R1 through 17.2R1-S7, 17.2R2-S6, 17.2R3 Junos OS versions 17.2X75 prior to 17.2X75-D102, 17.2X75-D110 Junos OS versions 17.3 prior to 17.3R2-S4, 17.3R3 Junos OS versions 17.4 prior to 17.4R1-S5, 17.4R2 Junos OS versions...

CVE-2018-0051: Improper Input Validation

A Denial of Service vulnerability in the SIP application layer gateway ALG component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC, MS-MPC, MS-DPC or SRX flow daemon flowd process. This issue affects Junos OS devices with NAT or stateful firewall configuration in...

PT-2018-1762

Name of the Vulnerable Software and Affected Versions Junos Space Security Director versions prior to 17.2R2 Description A persistent cross-site scripting issue in the UI framework of Junos Space Security Director may allow authenticated users to inject malicious scripts, potentially leading to...

PT-2018-1759

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.1R4 on NFX Series Description The issue is related to an insecure SSHD configuration in Juniper Device Manager JDM and the host OS on Juniper NFX Series devices, which may allow remote...

CVE-2018-0057: Undefined Security Weakness

On MX Series and M120/M320 platforms configured in a Broadband Edge BBE environment, subscribers logging in with DHCP Option 50 to request a specific IP address will be assigned the requested IP address, even if there is a static MAC to IP address binding in the access profile. In the problem...

CVE-2018-0061: Uncontrolled Resource Consumption

A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect system performance. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D81 on SRX Series; 12.3 versions prior to...

PT-2018-8589

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1R7-S2, 15.1R8 Junos OS versions prior to 16.1R4-S12, 16.1R7-S2, 16.1R8 Junos OS versions prior to 16.2R2-S7, 16.2R3 Junos OS versions prior to 17.1R2-S9, 17.1R3 Junos OS versions prior to 17.2R1-S7, 17.2R2-S6,...

PT-2018-8587

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1 through 18.2X75-D20, specifically: Junos OS versions 15.1 prior to 15.1R7-S2 Junos OS versions 15.1X49 prior to 15.1X49-D160 Junos OS versions 15.1X53 prior to 15.1X53-D235, 15.1X53-D495 Junos OS versions 16.1 prior to...

Qualys Policy Compliance Notification: Policy Library Update

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

Juniper Junos Malformed RSVP RPD DoS (JSA10861)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111207; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/04/22...

Juniper Junos Privilege Escalation (JSA10857)

According to its self-reported version number, the remote Junos device is affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111204; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Juniper Junos Security Bypass Stateless Firewall Deactivation (JSA10859)

According to its self-reported version number, the remote Junos device is affected by a firewall deactivation on reboot vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111206; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Juniper Junos HTTP/HTTPS Firewall User Authentication Remote Information Disclosure (JSA10858)

According to its self-reported version number, the remote Junos device is affected by a remote information disclosure vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111205; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple Junos OS versions. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Juniper Security Advisories websit...

Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages

Junos OS routing protocol daemon RPD process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages. By continuously sending crafted BGP NOTIFICATION messages, an attacker can repeatedly crash the RPD process causing a sustained Denial of...