CVE-2017-2345

Technical details for CVE-2017-2345 are not publicly available in the provided connected documents. Monitor for updates; the supplied materials do not specify affected Junos releases beyond the initial description.

CVE-2017-10602

CVE-2017-10602 describes a buffer overflow in Junos OS CLI that can allow a local authenticated user with read-only CLI access to execute code with root privileges. Affected releases include Junos OS versions across multiple lines of products: 14.1X53 (prior to 14.1X53-D46 on EX2200/VC, EX3200, E...

CVE-2017-2343

CVE-2017-2343 affects Juniper Junos SRX Series with the Integrated User Firewall (UserFW) authentication API. The root cause is hardcoded credentials in UserFW, enabling an unauthenticated, remote attacker to potentially gain administrative access to the SRX device and compromise connected servic...

CVE-2017-2349 SRX Series: Command injection vulnerability in SRX IDP feature.

A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS 12.1X44 prior to 12.1X44-D60; 12.1X46...

CVE-2017-10601

CVE-2017-10601 affects Junos OS where a specific device configuration can cause a commit failure, enabling login without password during console/SSH/FTP/Telnet/Su attempts. Affected releases include Junos OS 12.3 prior to 12.3R10, 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2 prior to 13.2R8; 13.3 ...

Juniper Junos Default Password Vulnerability

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. A default password vulnerability exists in the Juniper Junos SRX Series. An attacker could exploit this...

Juniper Junos Local Elevation of Privilege Vulnerability (CNVD-2015-00386)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. Juniper Junos has a local elevation of privilege vulnerability that can be exploited by a local attacker to gai...

Juniper Junos Administrator Privilege Acquisition Vulnerability (CNVD-2017-21782)

Juniper Junos is a network operating system dedicated to the company's hardware systems. An administrator privilege acquisition vulnerability exists in the Juniper Junos command line window, which could be exploited by a local attacker to gain administrator privileges...

Juniper Junos elevation of privilege vulnerability (CNVD-2017-21780)

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. An elevation of privilege vulnerability exists in Juniper Networks Junos, which allows a remotely authorized attacker to exploit the vulnerability to elevate privileges and take full control of th...

Juniper Junos Code Execution Vulnerability (CNVD-2017-21778)

Juniper Junos is a network operating system dedicated to the company's hardware systems. A code execution vulnerability exists in the Juniper Junos SNMP service that can be exploited by a remote attacker to submit a special request and execute arbitrary code...

Juniper Junos Authentication Bypass Vulnerability (CNVD-2016-09599)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. Juniper Junos has an authentication bypass vulnerability. A remote attacker could use this vulnerability to acce...

PT-2017-15368

Name of the Vulnerable Software and Affected Versions Juniper NetScreen Firewall+VPN versions prior to 6.3.0r24 on SSG Series Description A persistent cross-site scripting issue in the NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN allows a user with the 'security' role to...

PT-2017-15367

Name of the Vulnerable Software and Affected Versions Juniper NetScreen Firewall+VPN versions prior to 6.3.0r24 on SSG Series Description A persistent cross-site scripting issue in the NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN allows a user with the 'security' role to...

PT-2017-15366

Name of the Vulnerable Software and Affected Versions Juniper NetScreen Firewall+VPN versions prior to 6.3.0r24 Description A persistent cross-site scripting issue in the NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN allows a user with the 'security' role to inject...

Juniper Junos Denial of Service Vulnerability (CNVD-2017-21781)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. A denial of service vulnerability exists in Juniper Junos. An attacker could exploit this vulnerability to cause...

PT-2017-15364

Name of the Vulnerable Software and Affected Versions Juniper NetScreen Firewall+VPN versions prior to 6.3.0r24 on SSG Series Description A persistent cross-site scripting issue in the NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN allows a user with the 'security' role to...

Juniper Networks Releases Multiple Security Updates

Juniper Networks has released security updates to address multiple vulnerabilities in Junos OS and ScreenOS. A remote attacker could exploit several of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the Juniper Security Advisorie...

Juniper Networks Junos OS MS-MPC or MS-MIC DoS Vulnerability

Junos OS is prone to a denial of service vulnerability when parsing large fragmented traffic through an ALG. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Junos OS RPD DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in RPD due to malformed BGP OPEN message. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Juniper Networks Junos OS SRX Series: DHCP DoS Vulnerability

Junos OS on SRX series is prone to a denial of service vulnerability in flowd due to crafted DHCP packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...