PT-2018-1143

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D67 Junos OS versions prior to 12.3R12-S5 Junos OS versions prior to 12.3X48-D35 Junos OS versions prior to 14.1R8-S5 Junos OS versions prior to 14.1R9 Junos OS versions prior to 14.1X53-D44 Junos OS versions...

PT-2018-8561

Name of the Vulnerable Software and Affected Versions: Junos Space Security Director versions prior to 17.2R1 Description: A vulnerability in the Juniper Networks Junos Space Security Director allows unauthorized SSH access to a device by reusing a URL created for another user. Recommendations: F...

PT-2018-8560

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.1X46-D71 on SRX series Juniper Networks Junos OS versions prior to 12.3X48-D55 on SRX series Juniper Networks Junos OS versions prior to 15.1X49-D100 on SRX series Description: The issue allows...

CVE-2018-0006: Allocation of Resources Without Limits or Throttling

A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by the BBE subscriber management daemon bbe-smgd, and lead to a denial of service condition. The issue was caused by attempting to process an unbounded number o...

PT-2018-8562

Name of the Vulnerable Software and Affected Versions: Junos Space affected versions not specified Description: A reflected cross site scripting XSS issue may allow a remote authenticated user to inject web script or HTML, potentially leading to the theft of sensitive data and credentials from a...

CVE-2018-0013: Exposure of Sensitive Information to an Unauthorized Actor

A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system...

CVE-2018-0003: Undefined Security Weakness

A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequently, if this stored information is accessed, this may result in a kernel crash leading to a denial of service. Affected releases are...

Junos OS 12.1X46 SRX 210, 240, 650 series firewalls (KRACK)

The version of Juniper Junos OS installed on the remote host is affected by multiple vulnerabilities related to the KRACK attacks. This may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network. Note that Juniper's products do not support Fast BSS Transition...

The vulnerability of Juniper Networks’ Junos Space Network Management Platform, related to authentication procedures that lack sufficient safeguards, allows attackers to gain access to the system with privileged user privileges.

The vulnerability of Juniper Networks’ Junos Space Network Management Platform relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the system with privileged user privileges from a remote location...

The vulnerability of the Junos operating system, related to the lack of measures for cleaning input data, allows a intruder to gain unauthorized access to the device.

The vulnerability of the Junos operating system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a local attacker to increase their privileges and gain full control over the device, by using specially crafted combinations of CLI commands and...

The vulnerability of the Junos operating system’s IPv6 traffic processing service allows attackers to cause resource exhaustion and kernel failures.

The vulnerability of the Junos operating system’s IPv6 traffic processing service is related to resource management errors. Exploiting this vulnerability allows a malicious actor to remotely cause resource exhaustion and kernel failures through specially created IPv6 traffic...

The vulnerability of the connected authentication module (PAM) of the Junos operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Junos operating system’s authentication module PAM exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause failures in the “demons” that use PAM...

PT-2017-3584

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D71 on SRX Junos OS versions prior to 12.3X48-D55 on SRX Junos OS versions prior to 14.1R9 Junos OS versions prior to 14.1X53-D40 on QFX, EX Junos OS versions prior to 14.2R7-S9, 14.2R8 Junos OS versions pri...

Juniper Junos Space 17.1 < 17.1R1 Patch v1 / 16.1 < 16.1R3 Authentication Bypass (JSA10824)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1 17.1R1.1 or 16.1 16.1R3, and is therefore affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104175;...

Juniper Junos Space < 17.1R1 Multiple Vulnerabilities (JSA10826)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1R1, and is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104100; scriptversion"1.7";...

Juniper Junos DoS Vulnerability (JSA10821)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the express path feature that could cause the flowd process to crash. TRUSTED...

Juniper Junos Remote Execution Vulnerability (JSA10818)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the pluggable authentication module PAM of Juniper Networks Junos OS that may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as...

Juniper Junos SRX Flowd Crash Vulnerability (JSA10813)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in which a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid10403...

Juniper Junos FPC Crash Vulnerability (JSA10814)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the extended-statistics component that can cause the FPC to crash. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104035; scriptversion"1.6";...

Juniper Junos SRX Flowd Crash Vulnerability (JSA10811)

According to its self-reported version number, the remote Junos device is affected by a vulnerability where one or more ALGs enabled may cause a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104033;...