CVE-2016-1257

The CVE-2016-1257 entry describes a denial-of-service vulnerability in Juniper Junos OS Routing Engine (RPD) when LDP is enabled. A remote attacker can send crafted LDP packets to cause the RPD routing process to crash and restart. Affected software ranges include Junos OS releases such as 13.2R5...

CVE-2016-1257

The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R...

CVE-2016-1260

CVE-2016-1260 affects Juniper JUNOS OS on EX4300 series switches. A flaw in the Spanning Tree Protocol implementation allows remote attackers to trigger a denial of service (network loop and bandwidth consumption) via unspecified STP-related traffic. Affected software includes JUNOS OS versions p...

CVE-2016-1262

CVE-2016-1262 affects Juniper Junos OS on SRX series devices when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled. Affected versions include Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30. The is...

CVE-2016-1256

CVE-2016-1256 affects Juniper Junos OS across many releases (e.g., before 12.1X44-D55, 12.3R10, 14.2R4, 15.1X49-D10, etc.). The vulnerability arises in IGMPv3 handling, allowing a remote, unauthenticated attacker to cause a denial of service by sending a malformed IGMPv3 packet, impacting multica...

CVE-2016-1258

The CVE-2016-1258 entry concerns Juniper Junos OS J-Web, which uses Embedthis AppWeb. Affected versions include Junos OS prior to specific builds listed in the description (e.g., before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X4...

Juniper Removes Dual_EC, ANSI X9.31 Algorithms

Juniper Networks announced late Friday it was removing the suspicious DualECDRBG random number generator from its ScreenOS operating system. And while that’s heralded as a positive move considering DualEC’s dubious origins, there remain important and unanswered questions about Juniper’s decision ...

Exploit for Improper Authentication in Juniper Screenos

CVE-2015-7755-POC CVE-2015-7755 vuln...

CVE-2015-7754

Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...

Design/Logic Flaw

Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...

CVE-2015-7754

CVE-2015-7754 affects Juniper ScreenOS before version 6.3.0r21 where ssh-pka is configured; an unauthenticated, remote attacker can cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiations. CVSS metrics indicate high impact (v3 base 8.1, High; v2 base 9.3, H...

CVE-2015-7754

Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service system crash or execute arbitrary code via crafted SSH negotiation...

pathfinder.juniper.net XSS vulnerability

Vulnerable URL: http://pathfinder.juniper.net/feature-explorer/feature-family-info.html?familyName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:10 GMT Vulnerability type:| XSS Vulnerability...

kb.juniper.net Open Redirect vulnerability

Vulnerable URL: http://kb.juniper.net/InfoCenter/index?page=answerlink=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:53 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

Safety warning: the domestic more than 3 0 0 Station juniper network equipment by back door influence-vulnerability warning-the black bar safety net

In 2 0 1 5 year 1 2 on 1 8 November,Juniper's official website released a security Bulletin,noted that in their Netscrren firewall ScreenOS software found unauthorized code,which relates to the 2 security questions,one is in the VPN authentication code is placed in the back door,allowing an...

Mike Mimoso and Chris Brook Discuss the Threats of 2015

With 2015 more or less in the rear view mirror Mike Mimoso and Chris Brook discuss the year in security: Wassenaar, ransomware, Carbanak and Equation Group,how big of a deal Stagefright was, that Juniper backdoor, and more. Download: tp2015inreview.mp3 Music by Chris Gonsalves...

VulnCheck KEV: CVE-2015-7755

Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device...

Juniper ScreenOS SSH / Telnet Authentication Backdoor

The account 'netscreen' on the remote host has the password ' %sun='%s' = %u', a known backdoor password. The affected devices are firewalls and VPN gateways. A remote attacker can exploit this vulnerability to gain administrative access and monitor network traffic, deny network access, and alter...

Juniper Networks ScreenOS Denial of Service Vulnerability

Juniper Networks ScreenOS is a Juniper Networks operating system that runs in the NetScreen family of firewalls. A denial of service vulnerability exists in Juniper Networks ScreenOS. An attacker could exploit this vulnerability to cause an application to crash, denying service to legitimate user...

VulnCheck KEV: CVE-2015-7756

The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 before 6.3.0r18b, 6.3.0r19 before 6.3.0r19b,...