Lucene search
K

1476 matches found

Vulnrichment
Vulnrichment
added 2024/10/11 3:27 p.m.12 views

CVE-2024-47495 Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.

An Authorization Bypass Through User-Controlled Key vulnerability allows a locally authenticated attacker with shell access to gain full control of the device when Dual Routing Engines REs are in use on Juniper Networks Junos OS Evolved devices. This issue affects: Juniper Networks Junos OS Evolv...

8.4CVSS6.9AI score0.00013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/11 3:24 p.m.15 views

CVE-2024-47494 Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

8.2CVSS7AI score0.00266EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/11 3:23 p.m.19 views

CVE-2024-47491 Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash

An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service DoS. When a BGP UPDATE with malformed path attribute is received over an...

8.2CVSS0.00157EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/11 3:22 p.m.11 views

CVE-2024-47490 Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network based attacker to cause increased consumption of resources, ultimately resulting in a...

8.2CVSS0.00215EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/11 3:22 p.m.14 views

CVE-2024-47490 Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network based attacker to cause increased consumption of resources, ultimately resulting in a...

8.2CVSS7AI score0.00215EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/11 3:22 p.m.17 views

CVE-2024-47489 Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE

An Improper Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of the Juniper Networks Junos OS Evolved on ACX Series devices allows an unauthenticated, network based attacker sending specific transit protocol traffic to cause a partial Denial of Service DoS to...

6.9CVSS0.00073EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/11 3:22 p.m.18 views

CVE-2024-47489 Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE

An Improper Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of the Juniper Networks Junos OS Evolved on ACX Series devices allows an unauthenticated, network based attacker sending specific transit protocol traffic to cause a partial Denial of Service DoS to...

6.9CVSS7AI score0.00073EPSS
Exploits0References1
CVE
CVE
added 2024/10/11 3:22 p.m.49 views

CVE-2024-47489

CVE-2024-47489 (Junos OS Evolved, ACX Series) is a vulnerability in the Packet Forwarding Engine (pfe) where the Routing Engine’s handling of specific transit protocol packets can fill the shared DDoS protection queue, causing protocol flaps and partial DoS of downstream devices. It affects IPv4 ...

6.9CVSS5.7AI score0.00073EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/10/11 3:18 p.m.41 views

CVE-2024-39544

CVE-2024-39544 concerns an issue in Juniper Networks Junos OS Evolved where NETCONF traceoptions files can be read due to incorrect default permissions in the CLI. The vulnerability affects Junos OS Evolved where NETCONF traceoptions are configured, enabling a low-privileged local user to access ...

5.1CVSS4.8AI score0.00033EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/11 3:18 p.m.4 views

CVE-2024-39544 Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files

An Incorrect Default Permissions vulnerability in the command line interface CLI of Juniper Networks Junos OS Evolved allows a low privileged local attacker to view NETCONF traceoptions files, representing an exposure of sensitive information. On all Junos OS Evolved platforms, when NETCONF...

5.1CVSS6.2AI score0.00033EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/11 3:18 p.m.11 views

CVE-2024-39534 Junos OS Evolved: Connections to the network and broadcast address accepted

An Incorrect Comparison vulnerability in the local address verification API of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker to create sessions or send traffic to the device using the network and broadcast address of the subnet assigned to an interface. Thi...

5.4CVSS7AI score0.00042EPSS
Exploits0References1
CVE
CVE
added 2024/10/11 3:18 p.m.89 views

CVE-2024-39534

CVE-2024-39534 affects Junos OS Evolved. An incorrect comparison in the local address verification API allows an unauthenticated, network-adjacent attacker to create sessions or send traffic using the subnet’s network and broadcast addresses, bypassing certain controls such as stateless firewall ...

5.4CVSS5.5AI score0.00042EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/10/11 3:16 p.m.51 views

CVE-2024-39526

CVE-2024-39526 affects Junos OS on MX Series (MPC10/MPC11/LC9600), EX9200 (EX9200-15C), MX304, and Junos OS Evolved on PTX Series. The issue is an improper handling of exceptional conditions in DHCP packet processing; when DHCP snooping is enabled, malformed DHCP packets can cause ingress process...

7.1CVSS6.5AI score0.00081EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.2 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS system. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to cause a denial of service to the program...

7.1CVSS6.6AI score0.00149EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.2 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded system of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved that stems from uncontrolled resource consumption...

7.1CVSS6.5AI score0.0013EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.2 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS system. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to obtain sensitive information...

5.1CVSS6.6AI score0.00033EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.2 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded system of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved that stems from uncontrolled resource consumption...

7.1CVSS6.5AI score0.0013EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.1 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS system. A security vulnerability exists in Juniper Networks Junos OS Evolved that arises from improper restriction of communication channels to targeted endpoints...

8.2CVSS6.8AI score0.00215EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.1 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

8.7CVSS6.7AI score0.00041EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.2 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded system of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved that stems from uncontrolled resource consumption...

7.1CVSS6.5AI score0.0013EPSS
Exploits0References2
Rows per page
Query Builder