CVE-2019-0011

Junos OS kernel crash vulnerability CVE-2019-0011 affects the Junos OS kernel when processing a crafted packet to an out-of-band management interface (fxp0, me0, em0, vme0) destined for another address, enabling an attacker on the adjacent network to trigger repeated kernel crashes and a sustaine...

CVE-2019-0012

CVE-2019-0012 describes a DoS in Juniper Junos OS for VPLS PE: processing a crafted BGP message crashes the rpd daemon, potentially causing extended DoS due to repeated restarts. Affected are PE routers with BGP Auto discovery for LDP VPLS. Vulnerable releases include multiple Junos OS versions l...

CVE-2019-0001

CVE-2019-0001 affects Juniper Networks Junos OS on MX Series with dynamic VLANs. A malformed packet can trigger an uncontrolled recursion in the Broadband Edge subscriber management daemon (bbe-smgd), causing high CPU and a crash, with repeated packets leading to extended DoS. Affected Junos rele...

CVE-2019-0030 Juniper ATP: Password hashing uses DES and a hardcoded salt

Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3...

CVE-2019-0026 Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration

A persistent cross-site scripting XSS vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2019-0013 Junos OS: RPD crash upon receipt of malformed PIM packet

The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service DoS condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this...

CVE-2019-0006

Summary of CVE-2019-0006 (Juniper Junos FXPC): A crafted HTTP packet can trigger an uninitialized function pointer dereference in the Packet Forwarding Engine manager (FXPC) on EX, QFX and MX Series devices in a Virtual Chassis. This can crash the fxpc daemon or potentially allow remote code exec...

CVE-2019-0016

Junos Space is affected: Juniper Networks Junos Space versions prior to 18.3R1 allow a malicious authenticated user to delete a device from the database via crafted Ajax interactions that piggyback on another admin delete action. Root cause is a privilege/permission check bypass in the delete flo...

CVE-2019-0007

CVE-2019-0007 affects Juniper Networks Junos OS on the vMX Series, with affected releases: 15.1 versions prior to 15.1F5. The root cause is a predictable IP ID sequence number used by the device, enabling a family of attacks that rely on that predictability to compromise the system and clients pa...

CVE-2019-0016 Junos Space: Authenticated user able to delete devices without delete device privileges

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Spac...

CVE-2019-0018

The CVE-2019-0018 entry documents a persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP, affecting Juniper ATP 5.0 versions prior to 5.0.3. The issue allows an authenticated attacker to inject arbitrary scripts and potentially steal sensitive data or credent...

CVE-2019-0013

The CVE-2019-0013 issue affects Junos OS RPD when handling malformed IPv4 PIM Join packets. Affected Junos releases include 12.1X46 (prior to -D77), 12.3X48 (prior to -D77), 15.1 line (prior to 15.1F6-S10, 15.1R6-S6, 15.1R7), 15.1X49 (prior to -D150), 15.1X53 (prior to -D233, -D59), 16.1 (prior t...

CVE-2019-0021

Summary: Juniper ATP exposes secret CLI inputs (e.g., set mcm) by logging them in plaintext to /var/log/syslog, enabling a local authenticated user to view sensitive information. Affected versions: Juniper ATP 5.0 prior to 5.0.4. Root cause: sensitive command inputs are written to system logs ins...

CVE-2019-0022 Juniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software.

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

CVE-2019-0017 Junos Space: Unrestricted file upload vulnerability

The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1...

CVE-2019-0025

CVE-2019-0025 : Juniper ATP contains a persistent XSS in the RADIUS configuration menu. AFFECTED: Juniper ATP 5.0 versions prior to 5.0.3. ROOT CAUSE: stored/reflective cross-site scripting in the web admin interface. IMPACT: authenticated users can inject script to steal data/credentials from a ...

CVE-2019-0029 Juniper ATP: Splunk credentials are in logged in clear text

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3...

Juniper SRX Series Junos OS Denial of Service Vulnerability

Juniper SRX Series is an SRX Series firewall appliance from Juniper Networks, Inc. Junos OS is the operating system that runs on it. A security vulnerability exists in Junos OS versions 12.1X46, 12.3X48, and 15.1X49 on the Juniper SRX Series. An attacker could exploit this vulnerability with...

Junos OS: pd crash on VPLS PE upon receipt of specific BGP message (JSA10912)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability which allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeate...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10916)

According to its self-reported version number, the remote Juniper Junos device is affected by a Multiple vulnerabilities in libxml2: - Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.CVE-2016-4448 - Th...