CVE-2018-0043

CVE-2018-0043 affects Juniper Networks Junos OS RPD daemon. Receipt of specific MPLS packets can crash RPD and may allow remote code execution, impacting both IPv4 and IPv6 and exploitable only within the MPLS domain (end users on CE devices cannot trigger it). Affected releases include numerous ...

CVE-2018-0045

CVE-2018-0045 describes a vulnerability in Juniper Networks Junos OS where receiving a specific Draft-Rosen MVPN control packet can crash and restart the RPD daemon, with potential remote code execution. Exploitation is possible from the PE device within the MPLS core; end users on CE cannot trig...

CVE-2018-0044

An insecure SSHD configuration (PermitEmptyPasswords = yes) in Juniper Device Manager and the host OS on Juniper NFX Series devices allows remote unauthenticated access if any passwords are empty. Affected: Junos OS 18.1 versions prior to 18.1R4 on NFX Series. Root cause: SSHD permitting empty pa...

CVE-2018-0050

The CVE affects Juniper Networks Junos OS where receiving malformed MPLS RSVP traffic on an interface can crash the Routing Protocols Daemon (RPD), causing a sustained DoS. Affected versions include Junos OS 14.1 (prior to 14.1R8-S5, 14.1R9; 14.1X53-D48 on QFX), 14.2 (prior to 14.1X53-D130 on QFa...

CVE-2018-0048

The CVE-2018-0048 issue resides in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support in Junos OS. A network-based unauthenticated attacker can trigger memory exhaustion on affected devices, severely impacting performance and availability. Affected Junos OS versions i...

CVE-2018-0058

CVE-2018-0058 affects Juniper Networks Junos OS on MX Series, caused by handling of BroadBand Edge (BBE) client routes introduced with Tomcat (Next Generation Subscriber Management). Receipt of a specially crafted IPv6 exception packet can trigger a kernel crash (vmcore), leading to device reboot...

CVE-2018-0052

CVE-2018-0052 concerns Junos OS where, if RSH is enabled and PAM authentication is disabled, a remote unauthenticated attacker can obtain root access. RSH is disabled by default, and there is no documented CLI to enable it; an undocumented privileged command can enable RSH and disable PAM, exposi...

CVE-2018-0044 NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

CVE-2018-0053

CVE-2018-0053 affects Juniper Networks Junos OS on vSRX Series. During the initial boot sequence, an authentication bypass may allow an attacker to gain full control of the system without authentication on Junos OS 15.1X49 prior to 15.1X49-D30. Affected product/version: vSRX, Junos OS 15.1X49 pri...

CVE-2018-0057: Undefined Security Weakness

On MX Series and M120/M320 platforms configured in a Broadband Edge BBE environment, subscribers logging in with DHCP Option 50 to request a specific IP address will be assigned the requested IP address, even if there is a static MAC to IP address binding in the access profile. In the problem...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple Junos OS versions. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Juniper Security Advisories websit...

CVE-2018-0059: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2018-0048: Uncontrolled Resource Consumption

A vulnerability in the Routing Protocols Daemon RPD with Juniper Extension Toolkit JET support can allow a network based unauthenticated attacker to cause a severe memory exhaustion condition on the device. This can have an adverse impact on the system performance and availability. This issue onl...

CVE-2018-0054: Uncontrolled Resource Consumption

On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the management interface fxp0 can cause egress interface congestion, resulting in routing protocol packet drops, such as BGP, leading to peering flaps. The following log message may also...

CVE-2018-0044: Improper Authentication

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

PT-2018-1750

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46-D76 through 12.1X46-D80 Juniper Networks Junos OS version 12.3R12-S10 Juniper Networks Junos OS versions 12.3X48-D66 through 12.3X48-D74 Juniper Networks Junos OS version 14.1X53-D47 Juniper Networks...

CVE-2018-0056: Improper Input Validation

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon L2ALD daemon might crash when attempting to delete the duplicate MAC address when the...

CVE-2018-0060: Improper Input Validation

An improper input validation weakness in the device control daemon process dcd of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP address for itself. Junos devices are not...

Juniper Junos Malformed RSVP RPD DoS (JSA10861)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111207; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/04/22...

Juniper Junos Privilege Escalation (JSA10857)

According to its self-reported version number, the remote Junos device is affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111204; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...