Mirai Botnet Exploits Ivanti Connect Secure Flaws for Malicious Payload Delivery

Two recently disclosed security flaws in Ivanti Connect Secure ICS devices are being exploited to deploy the infamous Mirai botnet. That's according to findings from Juniper Threat Labs, which said the vulnerabilities CVE-2023-46805 and CVE-2024-21887 have been leveraged to deliver the botnet...

Juniper Junos OS Vulnerability (JSA79109)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79109 advisory. - A Use After Free vulnerability in command processing of Juniper Networks Junos OS on MX Series allows a local, authenticated attacker to cause the broadband edge service...

Juniper Junos OS Vulnerability (JSA79184)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79184 advisory. - A Use-After-Free vulnerability in the Layer 2 Address Learning Daemon l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker ...

Juniper Cloud Native Router Man-in-the-Middle

The vulnerability of software solutions for Juniper Cloud Native Router JCNR and Containerized Routing Protocol Daemon cRPD is related to the use of hard-coded host SSH keys. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...

Exploit for PHP External Variable Modification in Juniper Junos

PoC exploit for CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847. This exploit targets Juniper JunOS within SRX and EX Series products, achieving Remote Code Execution RCE by chaining four vulnerabilities. The exploit involves uploading an arbitrary PHP file to a restricted director...

Juniper SRX4600 Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE mechanism in the Junos OS router Juniper SRX4600 relates to the operation of writing data outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted netwo...

Juniper Junos OS Vulnerability (JSA79105)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79105 advisory. - An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000 Series devices using SPC2 line cards while ALGs are enabled allows an attacker...

Juniper Junos OS Vulnerability (JSA79094)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79094 advisory. - A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon rpd component of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker...

Juniper Tunnel Driver ICMP Module DoS

The vulnerability of the Juniper Tunnel Driver JTD and the ICMP module of Juniper Networks’ Junos OS Evolved operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted...

Juniper Networks Junos OS Code Issue Vulnerability (CNVD-2024-24978)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability that originates from a security flaw in the packet forwarding...

Unspecified Vulnerability in Juniper Networks Junos OS (CNVD-2024-24977)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS and Junos OS Evolved that stems from mishandling of an...

Juniper Networks Junos OS Routing Engine Data Compromise

The vulnerability of the Routing Engine RE module in Juniper Networks’ Junos OS networking devices of the EX4300 series is related to the incorrect implementation of the sequence of actions when using a firewall filter for IPv6 packet reception. Exploiting this vulnerability can allow an attacker...

Juniper Networks IKED DoS

The vulnerability of the IKE daemon iked in Juniper Networks’ Junos routers of the MX and SRX series involves improper memory release before deleting the last pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Juniper Networks’ Junos Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE in Juniper Networks’ Junos routers of the MX series is related to improper handling of exceptional states. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Juniper Networks Application Layer Gateway DoS

The vulnerability of the Application Layer Gateway module in Juniper Networks’ Junos OS networking devices of the SRX 5000 series is related to incorrect buffer size calculations when processing incoming packets. Exploiting this vulnerability can allow a malicious actor to cause service...

Juniper Junos OS Vulnerability (JSA75755)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75755 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a...

Juniper Junos OS Vulnerability (JSA75754)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75754 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS Vulnerability (JSA75757)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75757 advisory. - An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated, network-base...

Juniper Junos OS Vulnerability (JSA75744)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75744 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX Series allows a network based attacker with low...

Juniper Junos OS Vulnerability (JSA75747)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75747 advisory. - A Double Free vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Deni...