Juniper Junos OS Command Injection (JSA11109)

The version of Junos OS installed on the remote host is affected by a command injection vulnerability as referenced in the JSA11109 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security,...

CVE-2021-0217

A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running Juniper Networks Junos OS with DHCP local/relay server configured may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this...

CVE-2021-0223

A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is shipped with setuid permissions enabled and is owned by the root user, allowing local...

CVE-2021-0206

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and restart, resulting in a Denial of Service DoS. By continuously sending these specific packets, an attacker can repeatedly disabl...

CVE-2021-0212

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...

CVE-2021-0202

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

CVE-2021-0205

When the "Intrusion Detection Service" IDS feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or destination prefix, it may incorrectly match the prefix as /32, causing the filter to block unexpected traffic. This issue affects only IPv6 prefixes...

PT-2021-2113

Name of the Vulnerable Software and Affected Versions: Juniper Networks Contrail Networking versions prior to 1911.31 Description: The issue is related to an Information Exposure vulnerability in Juniper Networks Contrail Networking. It allows a locally authenticated attacker with file read acces...

Juniper Networks Junos OS Product Buffer Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A buffer error vulnerability exists in Junos OS EX and Junos OS QFX, which can be exploited by an attacker t...

PT-2021-2138 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 14.1X53-D54 Juniper Networks Junos OS versions prior to 15.1X49-D240 Juniper Networks Junos OS versions prior to 15.1X53-D593 Juniper Networks Junos OS versions prior to 16.1R7-S8 Juniper Networks...

PT-2021-2139

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 14.1X53-D53 on EX4300, QFX3500, QFX5100, EX4600 Juniper Networks Junos OS versions prior to 15.1R7-S6 on EX4300, QFX3500, QFX5100, EX4600 Juniper Networks Junos OS versions prior to 16.1R7-S7 on...

Juniper Junos OS DoS (JSA11107)

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11107 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. TRUSTED...

PT-2021-2122 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1R7-S9 Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S11 Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S12, 17.4R3-S3 Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S...

PT-2021-2134

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on EX Series and QFX5K Series versions prior to 15.1R7-S7 Juniper Networks Junos OS on EX Series and QFX5K Series versions prior to 16.1R7-S8 Juniper Networks Junos OS on EX Series and QFX5K Series versions prior to...

Juniper Networks Junos OS information leakage vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An elevation of privilege vulnerability exists in Junos OS. An attacker could use this vulnerability to bypass restriction...

Juniper Junos OS EX4300-MP/EX4600/QFX5K Series DoS (JSA11086)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11086 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. TRUSTED...

Junos OS malformed IPv6 packet DoS (JSA11083)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11083 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. TRUSTED...

Juniper Junos EX4300 Series DoS (JSA11067)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11067 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. TRUSTED...

Juniper Junos OS EX4300 / EX4600 / QFX5 Series DoS (JSA11084)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11084 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. TRUSTED...

CVE-2020-16846 — SaltStack Unauthenticated Shell Injection

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. Recent assessments: ccondon-r7 at October 14, 2021 2:31pm UTC reported: Being exploited in the wild as of April 2021. Juniper Networks...