CVE-2020-1688: Exposure of Private Personal Information to an Unauthorized Actor

On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator services. Exploitation of this vulnerability may allow an...

CVE-2020-1670: Uncontrolled Resource Consumption

On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine RE high CPU load, which could lead to network protocol operation issue and traffic interruption. This specific packets can originate only from within the broadcast domain where the device is...

CVE-2020-1669: Plaintext Storage of a Password

The Juniper Device Manager JDM container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. This is not a security best current practice as it can allow an attacker with access to the local...

CVE-2020-1665: Incomplete Filtering of Multiple Instances of Special Elements

On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service DDoS protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while it is under DDoS attack, protecting bot...

Juniper Networks Releases Security Updates for Multiple Products

Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to...

PT-2020-5150

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.1R3-S1 Juniper Networks Junos OS versions prior to 18.2R3-S5 Juniper Networks Junos OS versions prior to 18.3R2-S4, 18.3R3-S2 Juniper Networks Junos OS versions prior to 18.4R2-S5, 18.4R3-S2 Junip...

Pulse Secure Installer Service Installed (Windows)

Binary data juniperpulseinstallerserviceinstalled.nbin...

JunOS RPD Maintenance Failure

The vulnerability of the RPD daemon in the JunOS operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

FPC Module DoS

The vulnerability of the FPC module in JunOS and JunOS Evolved operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

JunOS Ethernet OAM Maintenance Failure

The vulnerability of the JunOS operating system’s Ethernet component is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

JunOS Privilege Escalation

The vulnerability of the Junos operating system in Juniper vMX virtual routers lies in the storage of pre-installed registration data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

JunOS Router DoS

The vulnerability of JunOS’ vMX and MX150 routers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

JunOS Elevation Privilege

The vulnerability of JunOS’s EX Series and QFX Series routers lies in their authentication deficiencies. Exploiting this vulnerability can allow attackers to gain privileges to the root level...

Juniper Advanced Threat Prevention Authentication Bypass

The vulnerability of the microprogramming software used in Juniper Advanced Threat Prevention JATP and vJATP lies in the lack of restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

JunOS SRX DoS

The vulnerability of JunOS operating system’s High-End SRX series routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Junos Privilege Escalation (JSA10978)

The version of Junos OS installed on the remote host is EX2300, EX2300-C or EX3400 version 18.1R3-S4 or 18.3R1-S3. It is, therefore, affected by a privilege escalation vulnerability as referenced in the JSA10978 advisory. Note that Nessus has not tested for this issue but has instead relied only ...

Juniper Junos DNS filtering JSA11028

According to the self reported version of Junos OS on the remote device is vulnerable to improper input validation. When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the...

Juniper Junos BGP DoS (JSA11024)

According to the self reported version of Junos OS on the remote device it is affected by a denial of service vulnerability as referenced in the JSA11024 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

Juniper Junos Privilege Escalation Vulnerability (JSA10977)

The version of Junos OS installed on the remote host is NFX prior to 18.2R1. It is, therefore, affected by a privilege escalation vulnerability as referenced in the JSA10977 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability (JSA11018)

The version of Junos OS installed on the remote host is prior to 12.3X48-D100, 15.1X49-D210, 17.3R2-S5, 17.4R2-S9, 18.1R3-S10, 18.2R2-S7, 18.3R1-S7, 18.4R1-S6, 19.1R1-S4, 19.2R1-S3, 19.3R2-S1, or 19.4R1-S1. It is, therefore, affected by a unified access control UAC bypass vulnerability as...