Juniper SRX Series Appliance Junos OS Denial of Service Vulnerability

The Juniper SRX series device is a series of firewall products from Juniper Networks, Inc.Junos OS is the operating system that runs on them. A security vulnerability exists in Junos OS versions 12.1X46, 12.3X48, and 15.1X49 on Juniper SRX series devices, which arises from a program that fails to...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-32281)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Junos OS version 16.1R1. An attacker could exploit this vulnerability to cause ...

Juniper Junos Space Network Management Platform Authentication Bypass Vulnerability

Juniper Junos Space Network Management Platform is a network management platform from Juniper Networks. The platform supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An authentication bypass vulnerability exists in Juniper Junos...

Juniper Contrail XML External Entity Injection Vulnerability

Juniper Contrail is a suite of cloud-based security solutions from Juniper Networks, Inc. The solution provides intelligent automation, application security and reliability for cloud and NFV. An XML external entity injection vulnerability exists in the ifmap service in Juniper Contrail. A remote...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-33971)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the telnetd service of Juniper Junos OS. A remote attacker could exploit this...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-33970)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. pluggable authentication module PAM is one of the authentication modules. A security vulnerability exists in the PAM in...

Juniper Junos OS telnetd Denial of Service Vulnerability

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in the telnetd service in Juniper Junos OS. A remote attacker could exploit this...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-33972)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Juniper Junos OS in the runtime configuration of the loopback filter action command...

Junos OS Denial of Service Vulnerability in Multiple Juniper Networks Products

Juniper SRX1400 and others are firewall appliances from Juniper Networks, Inc.Junos OS is the operating system that runs on them. A security vulnerability exists in the high availability cluster configuration mode of Junos OS versions 12.3X48 and 15.1X49 in various Juniper Networks products. An...

Juniper SRX Series Appliance Junos OS Sun/MS-RPC ALG Service Component Denial of Service Vulnerability

Juniper SRX series device is a series of firewall products from Juniper Networks.Junos OS is the operating system that runs on it.Sun/MS-RPC ALG services component is one of the Sun/MS-RPC ALG services components.Juniper SRX series device is a series of firewall products from Juniper Networks.Jun...

Junos OS Denial of Service Vulnerability in Multiple Juniper Networks Products (CNVD-2017-32220)

Juniper EX2200 and others are Juniper Networks products.Juniper EX2200, EX3300 and XRE200 are enterprise switches.MX Series router is a router.Junos OS is a set of operating system running on it. A security vulnerability exists in the Junos OS of the Juniper EX2200, EX3300, XRE200, and MX Series...

Juniper ScreenOS 6.3.x < 6.3.0r24 SSL Death Alert (JSA10808)

The version of Juniper ScreenOS running on the remote host is 6.3.x prior to 6.3.0r24. It is, therefore, affected by a vulnerability in the way the TLS/SSL protocol specifies processing of ALERT packets during a connection handshake. Note that Nessus has not tested for these issues but has instea...

CVE-2017-10622

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases...

CVE-2017-10624

Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1...

CVE-2017-10623

Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to...

Design/Logic Flaw

Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 halt in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on lin...

Design/Logic Flaw

By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop information for legitimate traffic. In extreme cases, the crafted IPv6 traffic may result in a total resource exhaustion...

Information disclosure

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...

CVE-2016-1265

A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery CSRF, default authentication credentials, information leak and command injection attack vectors. A...

CVE-2016-4923

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...