CVE-2018-0032

CVE-2018-0032 affects Juniper Networks Junos OS where receiving a crafted BGP UPDATE can crash and restart the routing process daemon (RPD). Repeated identical crafted updates may cause an extended denial-of-service condition. Affected are specific Junos OS releases: 16.1X65 versions before 16.1X...

CVE-2018-0027

The CVE-2018-0027 issue affects Juniper Networks Junos OS, where receiving a crafted or malformed RSVP PATH message can cause the routing protocol daemon (RPD) to hang or crash. This may prevent processing of routing updates when RPD is unavailable, potentially leading to an extended network outa...

CVE-2018-0029 Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0'

While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart vmcore. This issue only affects Junos OS 15.1 and later releases, and affects both single core and multi-core REs. Releases pri...

CVE-2018-0038: Use of Hard-coded Credentials

Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Cassandra...

CVE-2018-0041: Use of Hard-coded Credentials

Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone...

PT-2018-8582

Name of the Vulnerable Software and Affected Versions: Juniper Networks Contrail Service Orchestration versions prior to 3.3.0 Description: The issue allows network-based attackers unauthorized access to information stored in Cassandra due to hardcoded credentials. The Cassandra service is enable...

PT-2018-8585

Name of the Vulnerable Software and Affected Versions: Juniper Networks Contrail Service Orchestration versions prior to 3.3.0 Description: The issue concerns the use of hardcoded credentials to access the Keystone service, allowing network-based attackers to gain unauthorized access to informati...

CVE-2018-0040: Use of Hard-coded Cryptographic Key

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

CVE-2018-0032: Improper Input Validation

The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this...

PT-2018-8583

Name of the Vulnerable Software and Affected Versions: Juniper Networks Contrail Service Orchestration versions prior to 4.0.0 Description: The issue concerns hardcoded credentials in the Grafana service, which is enabled by default. These credentials can be exploited by network-based attackers t...

CVE-2018-0025: Cleartext Transmission of Sensitive Information

When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at risk that these credentials may be captured during follow-on HTTP/HTTPS requests by a malicious actor through a...

CVE-2018-0024: Improper Privilege Management

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

PT-2018-8586

Name of the Vulnerable Software and Affected Versions: Juniper Networks CSO versions prior to 4.0.0 Description: The issue allows passwords to be logged in log files, potentially leading to an information disclosure. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later t...

PT-2018-8573

Name of the Vulnerable Software and Affected Versions: Juniper Networks SRX Series versions prior to 12.1X46-D67 Juniper Networks SRX Series versions prior to 12.3X48-D25 Juniper Networks SRX Series versions prior to 15.1X49-D35 Description: The issue affects devices configured to use HTTP/HTTPS...

CVE-2018-0039: Use of Hard-coded Credentials

Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafan...

CVE-2018-0042: Insertion of Sensitive Information into Log File

Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability...

Juniper Networks’ Junos Space MySQL Server Privilege Escalation

The vulnerability of the MySQL server of the Juniper Networks Junos Space network resource management platform is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow a malicious actor to gain access with administrator privileges remotely...

Juniper NSM < 2012.2R14 OpenSSL Multiple Vulnerabilities (JSA10851)

The remote host is running a version of NSM Network and Security Manager Server that is prior to 2012.2R14. It is, therefore, affected by multiple vulnerabilities in the bundled version of OpenSSL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Juniper Junos VPLS Routing MPLS Packet Handling mbuf Exhaustion Remote DoS (JSA10845)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109211; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/20...

Juniper Junos SNMP MIB-II Subagent Daemon (mib2d) Unspecified Remote DoS (JSA10847)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by an unspecified flaw in the SNMP MIB-II subagent daemon, mib2d, that allows a remote attacker to cause the daemon to crash, resulting in a denial of service for the SNMP subsystem. No...