Junos OS vulnerable to directory traversal

Overview Junos OS contains a directory traversal vulnerability CWE-22. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Files on the server may be...

Junos OS vulnerable to cross-site scripting

Overview Junos OS contains a cross-site scripting vulnerability CWE-79. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be...

Juniper Networks Junos OS SNMP Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Routing Protocol Daemon RPD in Juniper Networks Junos OS. An attacker could exploit...

Juniper Networks Junos OS Path Traversal Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A path traversal vulnerability in Juniper Networks Junos OS can be exploited by an authenticated, remote attacker to submi...

JVN#21753370: Junos OS vulnerable to cross-site scripting

Junos OS contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's J-Web screen. Solution Update the Software Update the software to the latest version according to the information provided by the developer. Apply a Workaround Applying...

Juniper Networks Junos OS pccd Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains security vulnerabilities. An attacker can exploit this vulnerability with malformed Pat...

Juniper Networks Junos OS IPv6 Message Handling Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that arises from the program's failure to properly handle...

Juniper Networks Junos Space Path Traversal Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A path traversal vulnerability in Juniper Networks Junos Space prior to version 19.4R1, whi...

JVN#07375820: Junos OS vulnerable to directory traversal

Junos OS contains a directory traversal vulnerability CWE-22. Impact Files on the server may be viewed or deleted by an authenticated J-web user. According to the developer, this issue does not affect system files that can be accessed only by root user. Solution Update the Software Update the...

Juniper Networks Junos OS Cross-Site Scripting Vulnerability (CNVD-2020-03713)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A cross-site scripting vulnerability exists in J-Web in Juniper Networks Junos OS, which arises from a lack of proper...

Juniper Junos CVE-2020-1608 Multiple Denial of Service Vulnerabilities

Description Juniper Junos is prone to multiple denial-of-service vulnerabilities. An attacker may exploit these issues to cause denial-of-service conditions. Technologies Affected Juniper Junos 17.2R2-S6 Juniper Junos 17.2R2-S7 Juniper Junos 17.2R2-S8 Juniper Junos 17.2R3 Juniper Junos 17.2R3-S1...

Juniper Junos CVE-2020-1604 Security Bypass Vulnerability

Description Juniper Junos is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. The following products are affected: Juniper Junos 14.1X53 versions prior to...

Juniper Junos CVE-2020-1603 Memory Leak Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 16.1 Juniper Junos 16.1R1 Juniper Junos 16.1R2 Juniper Junos 16.1R3 Juniper Junos 16.1R3-S10 Juniper Junos 16.1R3-...

Juniper Junos CVE-2020-1600 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause the device to consume excessive CPU resources, denying service to legitimate users. Technologies Affected Juniper Junos 12.3X48 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48-D15...

Juniper Junos and Junos Evolved JSA10981 Multiple Security Vulnerabilities

Description Juniper Junos and Junos Evolved are prone to multiple security vulnerabilities. Successfully exploiting these issues may allow an attacker to perform unauthorized actions or execute arbitrary commands with root privileges on the affected device. Technologies Affected Juniper Junos 15....

Juniper Junos J-Web CVE-2020-1607 Cross Site Scripting Vulnerability

Description Juniper Junos is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

PT-2020-1512 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1F6-S13 Juniper Networks Junos OS versions prior to 15.1R7-S4 Juniper Networks Junos OS versions prior to 15.1X49-D180 on SRX Series Juniper Networks Junos OS versions prior to 15.1X53-D238 Junip...

Juniper Junos CVE-2020-1601 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 15.1F Juniper Junos 15.1F1 Juniper Junos 15.1F2 Juniper Junos 15.1F2-S14 Juniper Junos 15.1F2-S16 Juniper Junos...

The vulnerability of Junos OS routers from the NFX150, EX9200 series, with NG-RE, MX with NG-RE, PTX with NG-RE, and QFX10K with NG-RE families, arises due to incorrect restrictions on path names to restricted access directories. This allows attackers to gain unauthorized access to protected information.

The vulnerability of Junos OS router models in the NFX150, EX9200 with NG-RE, MX with NG-RE, PTX with NG-RE, and QFX10K with NG-RE series is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access t...

Junos OS: processing of specific transit IP packets in flowd, leading to Denial of Service (JSA10959)

The version of Junos OS installed on the remote host is prior to 15.1X49-D171 or 18.4R2. It is, therefore, affected by a vulnerability as referenced in the JSA10959 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...