CVE-2018-0051

The CVE-2018-0051 issue is a Denial-of-Service in the SIP application layer gateway (ALG) of Junos OS, crashing MS-PIC, MS-MIC, MS-MPC, MS-DPC or the SRX flow daemon (flowd) when SIP ALG is enabled on NAT/stateful setups. Affected Junos OS releases include 12.1X46 (before D77), 12.3X48 (before D7...

CVE-2018-0059

CVE-2018-0059 concerns a stored cross-site scripting vulnerability in Juniper ScreenOS (GUI). The issue is triggered by an authenticated remote user who can inject Web/script content, potentially stealing data and credentials from a web administration session and tricking another admin into unint...

CVE-2018-0057 Junos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)

On MX Series and M120/M320 platforms configured in a Broadband Edge BBE environment, subscribers logging in with DHCP Option 50 to request a specific IP address will be assigned the requested IP address, even if there is a static MAC to IP address binding in the access profile. In the problem...

CVE-2018-0056 MX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfaces

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon L2ALD daemon might crash when attempting to delete the duplicate MAC address when the...

CVE-2018-0051 Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG

A Denial of Service vulnerability in the SIP application layer gateway ALG component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC, MS-MPC, MS-DPC or SRX flow daemon flowd process. This issue affects Junos OS devices with NAT or stateful firewall configuration in...

CVE-2018-0060

The CVE-2018-0060 issue is an improper input validation vulnerability in Juniper Networks Junos OS device control daemon (dcd). The flaw can cause a Denial of Service to the dcd process, interfaces, and connected clients when a Junos device requests an IP address via DHCP. Affected releases inclu...

CVE-2018-0047 Junos Space Security Director: XSS vulnerability in web administration

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security...

CVE-2018-0055 Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message

Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband Edge BBE environment may result in a jdhcpd daemon crash. The daemon automatically restarts without intervention, but a continuous receipt of crafted DHCPv6 packets could leaded ...

CVE-2018-0057

This CVE-2018-0057 pertains to Junos OS on MX Series and M120/M320 in a Broadband Edge (BBE) environment. When a subscriber authenticates via DHCP Option 50 to request a specific IP, the device assigns that requested IP even if a matching MAC-to-IP binding exists in the access profile and an addr...

CVE-2018-0052 Junos OS: Unauthenticated remote root access possible when RSH service is enabled

If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can obtain root access to the device. RSH service is disabled by default on Junos. There is no documented CLI command to enable this service. However, an undocumented CLI command...

CVE-2018-0056

The CVE describes an issue in Juniper Networks Junos OS on MX Series devices with l2-backhaul VPN configured. The Layer 2 Address Learning Daemon (L2ALD) may crash when deleting a duplicate MAC address learned on two different interfaces if the entry is not found in the internal MAC address table...

CVE-2018-0046

CVE-2018-0046 is a reflected cross-site scripting vulnerability in OpenNMS included with Juniper Junos Space, affecting Junos Space versions prior to 18.2R1. Connected sources (e.g., the JUNIPER_SPACE_JSA10880 NASL plug-in) explicitly list CVE-2018-0046 among multiple issues, confirming the vulne...

CVE-2018-0062 Junos OS: Denial of Service in J-Web

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform J-Web operations. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series;...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple Junos OS versions. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Juniper Security Advisories websit...

Juniper Junos HTTP/HTTPS Firewall User Authentication Remote Information Disclosure (JSA10858)

According to its self-reported version number, the remote Junos device is affected by a remote information disclosure vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111205; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Juniper Junos Security Bypass Stateless Firewall Deactivation (JSA10859)

According to its self-reported version number, the remote Junos device is affected by a firewall deactivation on reboot vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111206; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Juniper Junos Malformed RSVP RPD DoS (JSA10861)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111207; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/04/22...

Juniper Junos Privilege Escalation (JSA10857)

According to its self-reported version number, the remote Junos device is affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111204; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

GHSA-QC55-VM3J-74GP JSNAPy allows unprivileged local users to alter files under the directory

JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample files of JSNAPy automation tool versions prior to 1.3.0 are created world writable. This insecure file and directory permission allows...

JSNAPy allows unprivileged local users to alter files under the directory

JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample files of JSNAPy automation tool versions prior to 1.3.0 are created world writable. This insecure file and directory permission allows...