Juniper Junos Administrator Privilege Acquisition Vulnerability (CNVD-2017-21782)

Juniper Junos is a network operating system dedicated to the company's hardware systems. An administrator privilege acquisition vulnerability exists in the Juniper Junos command line window, which could be exploited by a local attacker to gain administrator privileges...

Juniper Junos elevation of privilege vulnerability (CNVD-2017-21780)

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. An elevation of privilege vulnerability exists in Juniper Networks Junos, which allows a remotely authorized attacker to exploit the vulnerability to elevate privileges and take full control of th...

PT-2017-2497

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 14.1X53-D46 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC XRE, QFX3500, QFX3600, QFX5100 Juniper Networks Junos OS versions prior to 14.1X53-D130 on QFabric...

PT-2017-11402

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D67 on vSRX or SRX Series Junos OS versions prior to 12.3X48-D50 on vSRX or SRX Series Junos OS versions prior to 15.1X49-D91, 15.1X49-D100 on vSRX or SRX Series Description A specially crafted packet might...

PT-2017-11401

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D65 on SRX series Junos OS versions prior to 12.3X48-D45 on SRX series Junos OS versions prior to 15.1X49-D75 on SRX series Description The issue occurs when a device is configured for account lockout with a...

PT-2017-15370

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D100 on SRX300 series Description The MACsec feature on Juniper Networks Junos OS does not report errors when a secure link cannot be established, falling back to an unencrypted link instead. This can occur...

PT-2017-15369

Name of the Vulnerable Software and Affected Versions Junos OS versions 14.1X53 prior to 14.1X53-D40 Junos OS versions 15.1 prior to 15.1R5 Junos OS versions 15.1X49 prior to 15.1X49-D70 Junos OS versions 16.1 prior to 16.1R2 Description An insufficient authentication issue may allow unprivileged...

PT-2017-15371

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46 prior to 12.1X46-D67 Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D55 Juniper Networks Junos OS versions 13.3 prior to 13.3R10-S2 Juniper Networks Junos OS versions 14.1 prior to...

PT-2017-15375

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 14.1X53-D12, 14.1X53-D38, 14.1X53-D40 on QFX, EX, QFabric System Junos OS versions prior to 15.1F2-S18, 15.1R4 on all products and platforms Junos OS versions prior to 15.1X49-D80 on SRX Junos OS versions prior to...

PT-2017-15376

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X44 prior to 12.1X44-D60 Junos OS versions 12.1X46 prior to 12.1X46-D50 Junos OS versions 12.1X47 prior to 12.1X47-D35 Junos OS versions 12.3X48 prior to 12.3X48-D30 Junos OS versions 15.1X49 prior to 15.1X49-D30...

PT-2017-15374

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.3X48 prior to 12.3X48-D50, 12.3X48-D55 Junos OS versions 13.3 prior to 13.3R10 Junos OS versions 14.1 prior to 14.1R4-S13, 14.1R8-S3, 14.1R9 Junos OS versions 14.1X53 prior to 14.1X53-D42, 14.1X53-D50 Junos OS versions 14....

PT-2017-15372

On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and restart by sending a crafted SNMP packet. Repeated crashes of the snmpd daemon can result in a partial denial of service condition. Additionally, it ma...

PT-2017-11399

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3R10 Junos OS versions 12.3X48 prior to 12.3X48-D20 Junos OS versions 13.2 prior to 13.2R8 Junos OS versions 13.3 prior to 13.3R7 Junos OS versions 14.1 prior to 14.1R4-S12 Junos OS versions 14.1 prior to 14.1R5...

PT-2017-11400

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X53-D47 Junos OS versions 15.1 prior to 15.1R3 Description An XML injection issue in the Junos OS CLI allows a locally authenticated user to elevate privileges and execute arbitrary commands as the root user. Thi...

PT-2017-15345

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.3 prior to 12.3R12-S4, 12.3R13, 12.3R3-S4 Junos OS versions 12.3X48 prior to 12.3X48-D50 Junos OS versions 13.3 prior to 13.3R4-S11, 13.3R10 Junos OS versions 14.1 prior to 14.1R8-S3, 14.1R9 Junos OS versions 14.1X53 prior...

PT-2017-15373

Name of the Vulnerable Software and Affected Versions Junos OS versions 14.1X55-D30 through 14.1X55-D35 Junos OS versions 14.2R7 through 14.2R7-S4 Junos OS versions 15.1R5 through 15.1R5-S2 Junos OS versions 16.1R2 through 16.1R3-S2 Description The issue occurs when large fragmented packets are...

Juniper Networks Releases Multiple Security Updates

Juniper Networks has released security updates to address multiple vulnerabilities in Junos OS and ScreenOS. A remote attacker could exploit several of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Juniper Security Advisorie...

Juniper Networks Junos OS Sockets Library Buffer Overflow Vulnerability

Junos OS is prone to a buffer overflow vulnerability in the sockets library. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS SRX Series: MACsec Failure Vulnerability

Junos OS on SRX300 series are prone to a MACsec failure to report errors. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS SRX Series: Hardcoded Credentials Vulnerability

Junos OS on SRX series contain hardcoded credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...