CVE-2017-10620

The CVE describes a vulnerability in Juniper Networks Junos OS on SRX series devices where the HTTPS server certificate is not verified before downloading antivirus updates. This allows a man-in-the-middle attacker to inject bogus signatures, potentially causing service disruption or failing to d...

CVE-2017-10610

CVE-2017-10610 affects Juniper Networks Junos OS on SRX Series. A crafted ICMP packet inside a NAT64 IPv6→IPv4 tunnel can crash the flowd process, causing extended denial of service if NAT64 is configured. Affected releases are Junos OS 12.1X46 before 12.1X46-D71, 12.3X48 before 12.3X48-D55, and ...

CVE-2017-10608 SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets.

Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. This vulnerability in the Sun/MS-RPC ALG services component of Junos OS allows an attacker to cause a repeated denial of service against the target...

CVE-2017-10622 Junos Space: Authentication bypass vulnerability

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases...

CVE-2016-4922

CVE-2016-4922 — Junos OS privilege escalation . Affected: Juniper Networks Junos OS. Root cause: certain combinations of CLI commands and arguments allow a user with CLI permissions to gain elevated privileges and full control of the device. Impact: unauthorized access with complete control (conf...

CVE-2017-10608

CVE-2017-10608 affects Juniper SRX devices running Junos OS with Sun/MS-RPC ALG services enabled. The issue is a flowd crash triggered by processing IPv6 traffic via the Sun/MS-RPC ALG components, causing a repeated denial of service and, in clusters, potential flip-flop or complete flowd daemon ...

CVE-2017-10623

CVE-2017-10623 affects Juniper Networks Junos Space: lack of authentication and authorization for cluster messages can enable a man-in-the-middle attacker to intercept, inject, or disrupt cluster operations between two nodes. Affected are Junos Space releases prior to 17.1R1. The provided documen...

PT-2017-7951

Name of the Vulnerable Software and Affected Versions Junos J-Web affected versions not specified Description The issue is related to the lack of validation of certain input, which may lead to cross-site request forgery CSRF issues or cause a denial of J-Web service DoS. Recommendations At the...

PT-2017-11418

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 17.1R1 Description The issue is related to insufficient verification of node certificates, which may allow a man-in-the-middle type of attacker to make unauthorized modifications to the Space...

CVE-2017-10610: Improper Input Validation

On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured. Affect...

PT-2017-7952

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 15.1R3 Description A remote unauthenticated network-based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using...

PT-2017-11415

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D71 Junos OS versions 12.3X48 prior to 12.3X48-D55 Junos OS versions 15.1X49 prior to 15.1X49-D110 Description The issue allows a man-in-the-middle attacker to inject bogus signatures, potentially...

PT-2017-11414

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3X48-D45 Junos OS versions prior to 15.1X49-D80 Description The issue occurs when Express Path is configured on certain Juniper Networks SRX devices in high availability cluster configuration mode, causing the flo...

PT-2017-11416

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D71 Junos OS versions 12.3X48 prior to 12.3X48-D50 Junos OS versions 14.1 prior to 14.1R8-S5, 14.1R9 Junos OS versions 14.1X53 prior to 14.1X53-D50 Junos OS versions 14.2 prior to 14.2R7-S9, 14.2R8...

PT-2017-11413

Name of the Vulnerable Software and Affected Versions Junos OS versions 13.3 prior to 13.3R10-S2 Junos OS versions 14.1 prior to 14.1R8-S4, 14.1R9 Junos OS versions 14.1X50 prior to 14.1X50-D185 Junos OS versions 14.1X53 prior to 14.1X53-D45, 14.1X53-D50 Junos OS versions 14.2 prior to 14.2R7-S7,...

PT-2017-8608

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 15.1 prior to 15.1F5 Juniper Networks Junos OS versions 14.1 prior to 14.1R8 Description An issue in Juniper Networks Junos OS on vMX allows local unprivileged users on a host system to have read access to vM...

PT-2017-11405

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46 prior to 12.1X46-D55 on SRX Juniper Networks Junos OS versions 12.1X47 prior to 12.1X47-D45 on SRX Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D32 on SRX Juniper Networks Junos OS...

PT-2017-11406

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D71 Junos OS versions prior to 12.3X48-D55 Junos OS versions prior to 15.1X49-D100 on SRX Series Description A crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to...

PT-2017-11409

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46 prior to 12.1X46-D55 Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D35 Juniper Networks Junos OS versions 14.1 prior to 14.1R8-S4, 14.1R9 Juniper Networks Junos OS versions 14.1X53 prior...

PT-2017-11407

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 14.1R8-S5 Junos OS versions 14.1X53 prior to 14.1X53-D46 Junos OS versions 14.1X53 prior to 14.1X53-D50 Junos OS versions 14.2 prior to 14.2R7-S9 Junos OS versions 14.2 prior to 14.2R8 Junos OS versions 15.1 prior to...