Juniper Gather Device General Information

This module collects a Juniper ScreenOS and JunOS device information and configuration. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Juniper Gather Device General Information', 'Description'...

Juniper JSA11002

The version of Junos OS installed on the remote host is prior to 16.1R7-S6, 16.2R2-S11, 17.1R2-S11, 17.2R1-S9, 17.3R2-S5, 17.4R2-S7, 18.1R3-S4, 18.2R3, 18.2X75-D50, 18.3R2, or 18.4R2. It is, therefore, affected by a vulnerability as referenced in the JSA11002 advisory. Note that Nessus has not...

Juniper Junos RCE (JSA10871)

According to the self reported version of Junos OS on the remote device it is affected by a remote code execution vulnerability in the routing protocol daemon RPD. An unauthenticated, remote attacker can exploit this, via crafted BGP NOTIFICATION messages, to crash the RPD process and potentially...

Fedora: Security Advisory for openconnect (FEDORA-2020-143735a624)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for openconnect (FEDORA-2020-2af15c566e)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: openconnect-8.10-1.fc30

This package provides a multiprotocol VPN client for Cisco AnyConnect, Juniper SSL VPN / Pulse Connect Secure, and Palo Alto Networks GlobalProtect SSL VPN...

[SECURITY] Fedora 31 Update: openconnect-8.10-1.fc31

This package provides a multiprotocol VPN client for Cisco AnyConnect, Juniper SSL VPN / Pulse Connect Secure, and Palo Alto Networks GlobalProtect SSL VPN...

[SECURITY] Fedora 32 Update: openconnect-8.10-1.fc32

This package provides a multiprotocol VPN client for Cisco AnyConnect, Juniper SSL VPN / Pulse Connect Secure, and Palo Alto Networks GlobalProtect SSL VPN...

Juniper JSA11000

The version of Junos OS installed on the remote host is prior to 17.4R2-S9, 18.1R3-S9, 18.2X75-D12, 18.2R3, or 18.3R3. It is, therefore, affected by a vulnerability as referenced in the JSA11000 advisory. Note that Nessus has not tested for this issue but has instead relied only on the...

Path traversal

A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN DVPN, Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning ZTP allows an unauthenticated attacker to perform local file inclusion LFI or path traversal. Using this vulnerability...

CVE-2020-1631

CVE-2020-1631 is a path traversal/LFI vulnerability in the HTTP/HTTPS J-Web service of Junos OS. An unauthenticated attacker can exploit HTTP(S) to perform local file inclusion, path traversal, or possibly inject commands into httpd.log, read files with world-readable permissions (notably configu...

Juniper Junos Local File Include Vulnerability (JSA11021)

According to the self reported version of Junos OS on the remote device it is affected by a local file inclusion vulnerability in HTTP/HTTPS service. An unauthenticated remote attacker can exploit this to perform local file inclusion LFI, path traversal or maybe able to inject commands into the...

Juniper Releases Security Updates for Junos OS

Juniper has released security updates to address a vulnerability affecting multiple versions of Junos operating systems. A remote attacker can exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

CVE-2020-1632

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service DoS...

Design/Logic Flaw

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service DoS...

CVE-2020-1632

CVE-2020-1632 describes a DoS in Juniper Junos OS and Junos OS Evolved where receipt of a crafted BGP UPDATE can cause peers to terminate sessions by advertising an invalid UPDATE, particularly when at least one BGP session does not support RFC 4893 4-byte AS. Affected software ranges across many...

Juniper Networks Junos OS Resource Management Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS. A remote attacker could exploit this...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-22987)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in the NDP proxy function of the EVPN leaf node in Juniper Networks Junos O...

CVE-2020-1633

Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configured as a Broadband Network Gateway BNG and reach the EVPN leaf node, causing a stale MAC address entry. This could cause legitimate traffic to be discarded,...

Design/Logic Flaw

Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configured as a Broadband Network Gateway BNG and reach the EVPN leaf node, causing a stale MAC address entry. This could cause legitimate traffic to be discarded,...