Multiple Critical Vulnerabilities in Juniper Exploited in the Wild

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Multiple vulnerabilities have been discovered in Juniper Networks Junos OS, with the potential for pre-auth Remote Code Execution when chained in Juniper devices. Juniper Networks has confirmed th...

CISA Sets a Deadline - Patch Juniper Junos OS Flaws Before November 17

The U.S. Cybersecurity and Infrastructure Security Agency CISA has given a November 17, 2023, deadline for federal agencies and organizations to apply mitigations to secure against a number of security flaws in Juniper Junos OS that came to light in August. The agency on Monday added five...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-47246 SysAid Server Path Traversal Vulnerability CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability CVE-2023-36845...

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauthoperation.php that doesn't require authentication, an...

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the P...

Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to...

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is...

Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an...

The vulnerability of the Control Protocol Director (l2cpd) in Juniper Networks’ Junos and JunOS Evolved operating systems allows a attacker to induce a service failure.

The vulnerability of the Control Protocol Layer 2 l2cpd in Juniper Networks’ Junos and JunOS Evolved operating systems is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Routing Protocol Demon (RPD) in Juniper Networks’ Junos OS and Junper Networks’ Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Routing Protocol Data RPD in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the use of an uninitialized variable. Exploiting this vulnerability can allow attackers to cause service failures...

Juniper Junos OS Vulnerability (JSA73148)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73148 advisory. - An Improper Input Validation vulnerability in the VxLAN packet forwarding engine PFE of Juniper Networks Junos OS on QFX5000 Series, EX4600 Series devices allows an...

Juniper Junos OS Vulnerability (JSA73146)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73146 advisory. - An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks allows an attacker to cause a Denial of Service DoS to the device upon...

Juniper Junos OS Vulnerability (JSA73151)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73151 advisory. - An Exposure of Sensitive Information vulnerability in the ' CVE-2023-44187 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Juniper Junos OS Vulnerability (JSA73170)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73170 advisory. - An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon rpd Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS DoS Vulnerability (JSA73174)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73174 advisory. - An Improper Handling of Inconsistent Special Elements vulnerability in the Junos Services Framework jsf module of Juniper Networks Junos OS allows an unauthenticated netwo...

The vulnerability of the command-line interface (CLI) of Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Juniper Junos OS Vulnerability (JSA73145)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73145 advisory. - An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue...

The vulnerability of the application-level SIP ALG operating system Juniper Networks Junos routers of the MX and SRX series allows attackers to compromise the integrity of protected information.

The vulnerability of SIP application-level ALG operating systems running on Juniper Networks Junos routers of the MX and SRX series lies in insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected...

The vulnerability of Juniper Networks JunOS Evolved router models from the PTX10001, PTX10004, PTX10008, and PTX10016 series lies in the data source verification mechanism’s deficiencies. This allows attackers to trigger a system reboot.

The vulnerability of Juniper Networks JunOS Evolved router models series PTX10001, PTX10004, PTX10008, and PTX10016 lies in defects in the mechanism for verifying data sources during MAC address processing. Exploiting this vulnerability allows a malicious actor to trigger a system reboot...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved routers of the PTX10003 series allows a attacker to compromise data integrity.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved PTX10003 series routers stems from insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise data integrity from a remote locati...