PT-2023-6154 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.4R3-S4 Juniper Networks Junos OS versions prior to 22.1R3-S3 Juniper Networks Junos OS versions prior to 22.2R3-S2 Juniper Networks Junos OS versions prior to 22.3R2-S2, 22.3R3 Juniper Networks...

PT-2023-6306

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 19.1R3-S10 Junos OS versions 19.2 prior to 19.2R3-S7 Junos OS versions 19.3 prior to 19.3R3-S8 Junos OS versions 19.4 prior to 19.4R3-S12 Junos OS versions 20.2 prior to 20.2R3-S8 Junos OS versions 20.4 prior to...

PT-2023-6226

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 20.4R3-S8 Juniper Networks Junos OS versions 21.1R1 and later Juniper Networks Junos OS versions prior to 21.2R3-S6 Juniper Networks Junos OS versions prior to 21.3R3-S5 Juniper Networks Junos OS...

CVE-2023-44186: Improper Handling of Exceptional Conditions

An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service DoS. Continued receipt and...

CVE-2023-44187: Exposure of Sensitive Information to an Unauthorized Actor

An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords supplied on the CLI command-line. These credentials can then be used to provide unauthorized access to the remote system. Th...

CVE-2023-44189: Origin Validation Error

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to...

Juniper Networks Junos OS Evolved Access Control Error Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to bypass MAC address checking, allowing MAC addresses that are not intended to reach neighbori...

PT-2023-6301 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 21.4R3-S5-EVO Juniper Networks Junos OS Evolved 22.1 versions prior to 22.1R3-S4-EVO Juniper Networks Junos OS Evolved 22.2 versions 22.2R1-EVO and later Juniper Networks Junos OS Evolved 22...

CVE-2023-44190: Origin Validation Error

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016 devices allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded ...

Juniper Networks Junos OS and Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

PT-2023-6243 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 20.4R3-S7-EVO Junos OS Evolved version 21.1R1-EVO and later Junos OS Evolved versions prior to 21.2R3-S5-EVO Junos OS Evolved versions prior to 21.3R3-S4-EVO Junos OS Evolved versions prior to 21.4R3-S4-EVO...

Juniper Networks Junos OS Evolved Information Disclosure Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to view passwords provided on the CLI command line...

Juniper Networks Junos OS Evolved Access Control Error Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to bypass MAC address checking, allowing MAC addresses that are not intended to reach neighbori...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to intercept VNF Virtual Network Functions communications, thereby exposing sensitive information...

PT-2023-6228 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved on PTX10003 Series versions prior to 21.4R3-S4-EVO Juniper Networks Junos OS Evolved on PTX10003 Series version 22.1 versions prior to 22.1R3-S3-EVO Juniper Networks Junos OS Evolved on PTX10003 Series versio...

CVE-2023-4481

CVE-2023-4481 describes an improper input validation in Juniper’s Routing Protocol Daemon (rpd) for Junos OS and Junos OS Evolved. A remote, unauthenticated attacker can cause a DoS by sending crafted BGP UPDATE messages over an existing BGP session; the impact can be sustained as updates are pro...

CVE-2023-4481 Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

Vulnerability fixed in Juniper JunOS and JunOS Evolved

Juniper has fixed a vulnerability in JunOS and JunOS Evolved. A malicious party could exploit the vulnerability to cause a denial-of-service attack. The vulnerability is in the way BGP UPDATEs are processed. When a specially prepared UPDATE is sent, it can cause the connection to be dropped...

CVE-2023-4481: Improper Input Validation

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

Juniper Networks Junos OS和Junos OS Evolved 输入验证错误漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos...