CVE-2021-0221

CVE-2021-0221 affects Juniper Networks Junos OS on QFX Series. A traffic loop can occur when an IRB with VGA is configured in EVPN/VXLAN, leading to DoS in packet processing due to abnormal interface traffic escalation. Public details specify affected Junos OS versions across multiple releases an...

CVE-2021-0220 Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI

The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser for example via XSS or access cached contents may be able to obtain a copy of...

CVE-2021-0220

CVE-2021-0220 (Juniper Junos Space) affects Junos Space versions prior to 20.3R1. The issue is that shared secrets are stored in a recoverable format and can be exposed through the UI. An attacker who can run arbitrary code in the victim’s browser (e.g., via XSS) or access cached contents may obt...

CVE-2021-0219 Junos OS: Command injection vulnerability in 'request system software' CLI command

A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticated attacker with privileges to execute commands with root privilege. To validate a package in Junos before installation, an administrator executes the command...

CVE-2021-0219

CVE-2021-0219 is a local command-injection vulnerability in Juniper Junos OS in the install package validation subsystem, exploitable when an administrator runs the CLI command 'request system software add validate-on-host' to validate packages. A locally authenticated attacker with CLI access ca...

CVE-2021-0218

CVE-2021-0218 affects Juniper Networks Junos OS license-check daemon. The vulnerability is a command injection that may allow a locally authenticated attacker with low privileges to run commands as root via the CLI command 'request system license update'. Affected Junos OS versions include 17.3 b...

CVE-2021-0217

This CVE (CVE-2021-0217) affects Juniper Networks Junos OS on EX Series and QFX Series switches with DHCP local/relay server enabled. A memory exhaustion issue in processing certain DHCP packets can exhaust DMA memory, causing a DoS and potential fxpc process crash or traffic forwarding disruptio...

CVE-2021-0217 Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running Juniper Networks Junos OS with DHCP local/relay server configured may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this...

CVE-2021-0212

CVE-2021-0212 concerns Juniper Networks Contrail Networking. A local, authenticated attacker can read files to obtain plaintext administrator credentials, enabling privilege escalation on affected systems. The vulnerability affects Contrail Networking versions prior to 1911.31. The available docu...

CVE-2021-0215 Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps

On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwarding, to crash and restart. An...

CVE-2021-0215

The CVE-2021-0215 issue is a memory leak in Juniper Junos OS on EX/QFX/MX/SRX devices triggered when the 802.1X authenticator port interface flaps. The pfex process (packet forwarding) can crash and restart as memory grows. Several Junos OS releases are affected across multiple lines and versions...

CVE-2021-0212 Contrail Networking: Administrator credentials are exposed in a plaintext file

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...

CVE-2021-0210 Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session

An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session. This issue affects: Juniper Networks Junos OS 12.3 versions prior to...

CVE-2021-0210

CVE-2021-0210 affects Juniper Networks Junos OS and specifically the J-Web interface. The vulnerability is an information exposure flaw that enables an unauthenticated attacker to leverage an authenticated user session to elevate privileges. Affected versions include multiple release tracks acros...

CVE-2021-0209 Junos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.

In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service DoS. Continued receipt of these types of valid BGP update packets will cause an extended Denia...

CVE-2021-0209

CVE-2021-0209 affects Juniper Networks Junos OS Evolved (RPD daemon) where processing certain valid BGP update packets can lead to an uninitialized pointer dereference, causing RPD to core and a Denial of Service. The DoS can persist with continued receipt of such packets and requires an RPD rest...

CVE-2021-0208

Technical details beyond the initial description are not provided in the connected documents; monitor for updates on CVE-2021-0208 via Juniper/NCSC pages.

CVE-2021-0207 NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being...

CVE-2021-0206 Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and restart, resulting in a Denial of Service DoS. By continuously sending these specific packets, an attacker can repeatedly disabl...

CVE-2021-0207

CVE-2021-0207 describes a DoS in Juniper Networks Junos OS caused by an improper interpretation conflict of certain data between software components, where specific traffic received on an ingress interface is filtered and redirected to a different VLAN, preventing forwarding. The issue affects IP...