CVE-2017-10616 Contrail: hard coded credentials

The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and ha...

CVE-2017-10616

CVE-2017-10616 affects Juniper Contrail’s ifmap service and stems from hard-coded credentials in the bundled ifmap component. Affected releases include Contrail 2.2 before 2.21.4; 3.0 before 3.0.3.4; 3.1 before 3.1.4.0; and 3.2 before 3.2.5.0. This CVE can be chained with CVE-2017-10617, contribu...

CVE-2016-1265

Juniper Networks Junos Space is affected by CVE-2016-1265. All versions prior to 15.1R3 are vulnerable to remote, unauthenticated exploitation that may allow arbitrary code execution or access to devices managed by Junos Space via vectors including CSRF, default credentials, information disclosur...

CVE-2017-10606 SRX Series: Cryptographic weakness in SRX300 Series TPM Firmware

Version 4.40 of the TPM Trusted Platform Module firmware on Juniper Networks SRX300 Series has a weakness in generating cryptographic keys that may allow an attacker to decrypt sensitive information in SRX300 Series products. The TPM is used in the SRX300 Series to encrypt sensitive configuration...

CVE-2017-10611 Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled

If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended...

CVE-2017-10617

The CVE-2017-10617 issue is an XML External Entity (XXE) vulnerability in the ifmap service bundled with Juniper Networks Contrail. The vulnerability allows an attacker to retrieve sensitive system files and affects Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0...

CVE-2017-10619 Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets

When Express Path formerly known as service offloading is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from...

PT-2017-11403

Name of the Vulnerable Software and Affected Versions Juniper Networks SRX300 Series version 4.40 Description The issue is related to a weakness in generating cryptographic keys in the TPM firmware, which could allow an attacker to decrypt sensitive information. The TPM is used for encrypting...

CVE-2017-10618: Undefined Security Weakness

When the 'bgp-error-tolerance' feature â€" designed to help mitigate remote session resets from malformed path attributes â€" is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled th...

CVE-2017-10623: Improper Authentication

Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to...

CVE-2017-10610: Improper Input Validation

On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured. Affect...

CVE-2017-10607: Undefined Security Weakness

Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit PDU sent directly to the router, which can cause the RPD routing process to crash and restart. Unlike BGP UPDATEs, which are transitive in nature, this...

CVE-2017-10608: Uncontrolled Resource Consumption

Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. This vulnerability in the Sun/MS-RPC ALG services component of Junos OS allows an attacker to cause a repeated denial of service against the target...

CVE-2017-10616: Use of Hard-coded Credentials

The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and ha...

PT-2017-8609

Name of the Vulnerable Software and Affected Versions Juniper E Series routers with IPv6 licensed and enabled affected versions not specified Description The issue is triggered by the receipt of a specifically malformed IPv6 packet, which may cause a line card reset due to a processor exception i...

CVE-2017-10617: Improper Restriction of XML External Entity Reference

The ifmap service that comes bundled with Contrail has an XML External Entity XXE vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0...

CVE-2016-4922: Improper Neutralization of Special Elements used in a Command

Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating system. This may allow any user with permissions to run these CLI commands the ability to achieve elevated privileges and gain complete contro...

CVE-2017-10606: Undefined Security Weakness

Version 4.40 of the TPM Trusted Platform Module firmware on Juniper Networks SRX300 Series has a weakness in generating cryptographic keys that may allow an attacker to decrypt sensitive information in SRX300 Series products. The TPM is used in the SRX300 Series to encrypt sensitive configuration...

CVE-2017-10619: Undefined Security Weakness

When Express Path formerly known as service offloading is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from...

CVE-2017-10611: Undefined Security Weakness

If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended...