PT-2023-2549 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 19.2 through 19.2R3-S6 Juniper Networks Junos OS on SRX Series versions 19.3 through 19.3R3-S6 Juniper Networks Junos OS on SRX Series versions 19.4 through 19.4R3-S9 Juniper Networks Junos OS ...

PT-2023-1284 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.2R3-S5 Juniper Networks Junos OS versions 20.3 prior to 20.3R3-S5 Juniper Networks Junos OS versions 20.4 prior to 20.4R3-S4 Juniper Networks Junos OS versions 21.1 prior to 21.1R3-S3 Juniper...

The vulnerability of the SIP Application Layer Gateway (ALG) on Juniper Networks’ Junos operating systems allows a attacker to trigger a system failure and restart the device.

The vulnerability of the SIP Application Layer Gateway ALG on Juniper Networks Junos operating systems is related to the use of an uninitialized pointer in the stack. Exploiting this vulnerability can allow a malicious actor to trigger a system failure and restart the device remotely...

CVE-2022-22184

CVE-2022-22184 : Juniper Junos OS and Junos OS Evolved (22.3R1 / 22.3R1-EVO) contain an improper input validation vulnerability in the Routing Protocol Daemon (rpd). An unauthenticated, network-based attacker can trigger a Denial of Service by sending a BGP update on an established session that c...

Juniper Junos OS Vulnerability (JSA70175)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70175 advisory. - An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based...

CVE-2022-22184

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

Input validation

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

Juniper Junos OS Vulnerability (JSA69880)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69880 advisory. - An Improper Validation of Specified Type of Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an attacker to cause an RPD memory...

The vulnerability of the J-Web interface in Juniper Networks Junos OS allows a hacker to execute arbitrary code.

The vulnerability of the J-Web interface in Juniper Networks Junos OS systems relates to the ability to execute local PHP files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

High-Severity Flaws in Juniper Junos OS Affect Enterprise Networking Devices

Multiple high-severity security flaws have been disclosed as affecting Juniper Networks devices, some of which could be exploited to achieve code execution. Chief among them is a remote pre-authenticated PHP archive file deserialization vulnerability CVE-2022-22241, CVSS score: 8.1 in the J-Web...

Juniper Junos OS Multiple Vulnerabilities (JSA69899)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69899 advisory. - An Improper Input Validation vulnerability in the J-Web component of Juniper Networks Junos OS may allow an unauthenticated attacker to access data without proper...

The vulnerability of Juniper Networks Junos OS Evolved PTX router devices allows a attacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS Evolved PTX router devices relates to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the file system of Juniper Networks Junos OS router series cSRX allows a attacker to enhance their privileges.

The vulnerability of the file system of Juniper Networks Junos OS router series cSRX lies in the way passwords are stored in a recoverable format. Exploiting this vulnerability can allow attackers to increase their privileges...

Juniper Networks Paragon Active Assurance Cross-Site Scripting Vulnerability

Juniper Networks Paragon Active Assurance is a programmable test and service assurance solution from Juniper Networks, Inc. Using software-based and traffic-generating test proxies, it can be easily used and delivered as a SaaS solution from the cloud or deployed locally in NFV environments. A...

Juniper Junos OS Privilege Escalation (JSA69895)

The version of Junos OS installed on the remote host is affected by a privilege escalation vulnerability as referenced in the JSA69895 advisory. An Execution with Unnecessary Privileges vulnerability in Management Daemon mgd of Juniper Networks Junos OS Evolved allows a locally authenticated...

CVE-2022-22244

An XPath Injection vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker sending a crafted POST to reach the XPath channel, which may allow chaining to other unspecified vulnerabilities, leading to a partial loss of confidentiality. This issue affect...

CVE-2022-22247

An Improper Input Validation vulnerability in ingress TCP segment processing of Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker to send a crafted TCP segment to the device, triggering a kernel panic, leading to a Denial of Service DoS condition. Continued receipt...

CVE-2022-22242

A Cross-site Scripting XSS vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker to run malicious scripts reflected off of J-Web to the victim's browser in the context of their session within J-Web. This issue affects Juniper Networks Junos OS all...

CVE-2022-22249

An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When there is a continuous mac move a memory corruption causes one or mo...

CVE-2022-22251

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX softwa...