CVE-2023-22396 Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine RE of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service Do...

CVE-2023-22403 Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic

An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. On QFX10K Series, Inter-Chassis Control Protocol ICCP is used in MC-LAG...

CVE-2023-22391 Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)

A vulnerability in class-of-service CoS queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service DoS. Specific packets are being incorrectly routed to a queue used for other high-priority traffic such a...

CVE-2023-22399 Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled

When sFlow is enabled and it monitors a packet forwarded via ECMP, a buffer management vulnerability in the dcpfe process of Juniper Networks Junos OS on QFX10K Series systems allows an attacker to cause the Packet Forwarding Engine PFE to crash and restart by sending specific genuine packets to...

CVE-2023-22395 Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. In an MPLS scenario specific packets destined to an Integrated Routing and Bridging irb interface of the...

PT-2023-3067 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 12.3R12-S19 through 22.3R2 Juniper Networks Junos OS versions 15.1R7-S10 through 22.3R2 Juniper Networks Junos OS versions 17.3R3-S12 through 22.3R2 Juniper Networks Junos OS versions 18.4R3-S9 through 22.3R...

PT-2023-1289 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 18.4R2-S7 Juniper Networks Junos OS versions 19.1 prior to 19.1R3-S2 Juniper Networks Junos OS versions 19.2 prior to 19.2R3 Juniper Networks Junos OS versions 19.3 prior to 19.3R3 Juniper Networks...

PT-2023-1292 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 15.1 through 15.1R7-S11 Juniper Networks Junos OS versions 19.1 through 19.1R3-S8 Juniper Networks Junos OS versions 19.2 through 19.2R1-S8 Juniper Networks Junos OS versions 19.2R3 through 19.2R3-S4 Juniper...

PT-2023-3071 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on ACX2K Series versions prior to 19.4R3-S9 Juniper Networks Junos OS on ACX2K Series versions 20.2 Juniper Networks Junos OS on ACX2K Series versions 20.3 through 20.3R3-S6 Juniper Networks Junos OS on ACX2K Series...

PT-2023-1288 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 Juniper Networks Junos OS version 20.1R1 and later versions Juniper Networks Junos OS versions prior to 20.2R3-S6 Juniper Networks Junos OS versions prior to 20.3R3-S6 Juniper Networks...

PT-2023-1238 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.3R3-S7 Juniper Networks Junos OS 19.4 versions prior to 19.4R2-S8, 19.4R3-S10 Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S6 Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S5...

PT-2023-1280 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos versions prior to 19.4R3-S9 Junos versions 20.2 prior to 20.2R3-S6 Junos versions 20.3 prior to 20.3R3-S6 Junos versions 20.4 prior to 20.4R3-S5 Junos versions 21.1 prior to 21.1R3-S4 Junos versions 21.2 prior to 21.2R3-S3 Junos version...

PT-2023-1260 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on MX Series and SRX Series versions prior to 20.4R3-S5 Juniper Networks Junos OS on MX Series and SRX Series versions prior to 21.1R3-S4 Juniper Networks Junos OS on MX Series and SRX Series versions prior to...

CVE-2022-22184 Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

Command injection

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability...

CVE-2022-37902

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

ILIAS 操作系统命令注入漏洞

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions prior to 7.16. An attacker exploited the vulnerability to perform OS command injection attacks...

D-Link DHP-W310AV 操作系统命令注入漏洞

The D-Link DHP-W310AV is a wireless mini wireless extender from China-based AUO D-Link. An operating system command injection vulnerability exists in D-Link DHP-W310AV firmware version 3.10EU, which stems from its System Checks function that allows attackers to implement command injection...

Command injection

An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability...

Command injection

An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...