CVE-2021-0228: Improper Check for Unusual or Exceptional Conditions

An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC Modular Port Concentrator deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause...

CVE-2021-0257

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

PT-2021-3375

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 16.1R7-S8 Juniper Networks Junos OS versions 17.1 prior to 17.1R2-S12 Juniper Networks Junos OS versions 17.2 prior to 17.2R3-S4 Juniper Networks Junos OS versions 17.3 prior to 17.3R3-S8 Juniper...

PT-2021-3309

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on MX Series versions prior to 15.1R7-S9 Juniper Networks Junos OS on MX Series versions prior to 17.3R3-S11 Juniper Networks Junos OS on MX Series versions prior to 17.4R3-S4 Juniper Networks Junos OS on MX Series...

PT-2021-2558

Name of the Vulnerable Software and Affected Versions: Poly VVX, CCX and Trio IP phones affected versions not specified Description: The issue is related to insufficient access control in the Zero Touch Provisioning ZTP Service of the Poly VVX, CCX, and Trio IP phones' firmware. It may allow a...

CVE-2021-0202

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

Heap overflow

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

CVE-2021-0202 Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

CVE-2021-0202

CVE-2021-0202 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPC when an Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain. The issue is a memory leak in the Modular Port Concentrator (MPC) caused by certain CE device events, ...

CVE-2020-1665

On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service DDoS protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while it is under DDoS attack, protecting bot...

Design/Logic Flaw

On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service DDoS protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while it is under DDoS attack, protecting bot...

CVE-2020-1665 Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.

On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service DDoS protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while it is under DDoS attack, protecting bot...

CVE-2020-1665

Juniper Junos OS IPv6 DDoS protection can fail to activate under a threshold condition on MX Series and EX9200 Series with Trio-based PFEs. This may allow the Routing Engine (RE) and/or the Flexible PIC Concentrator (FPC) to become overwhelmed, potentially disrupting network protocol operations o...

CVE-2020-1665: Incomplete Filtering of Multiple Instances of Special Elements

On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service DDoS protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while it is under DDoS attack, protecting bot...

CVE-2019-18624

Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO aka Right to Left Override approach, as demonstrated by misinterpretation of malicious%E2%80%AEtxt.apk as maliciouskpa.txt. This affects 44.1.2254.142553, 44.1.2254.142659, and...

trio-sc.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8584 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting trio-sc.ru website and its users. Following coordinated an...

Schneider Electric Trio J-Series License Free Ethernet Radio 3.6.0 <= 3.6.3 Hardcoded Encryption Key

Binary data 720035.prm...

Polycom Trio Improper Access Control Vulnerability

Polycom Trio is a Polycom Trio series of business conference phones.The Bluetooth subsystem is one of the Bluetooth subsystems. A security vulnerability exists in the Bluetooth subsystem on Polycom Trio using software versions prior to 5.5.4, which stems from the program failing to enforce proper...

CVE-2018-14935

The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS...

Design/Logic Flaw

The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone...