CVE-2017-2349

The CVE-2017-2349 entry describes a remote command injection in Juniper Junos OS SRX series IDP feature. Affected releases include Junos OS 12.1X44 (before 12.1X44-D60), 12.1X46 (before 12.1X46-D50), 12.1X47 (before 12.1X47-D30, D35), 12.3X48 (before 12.3X48-D20, D30), and 15.1X49 (before 15.1X49...

CVE-2017-2341 Junos OS: VM to host privilege escalation in platforms with Junos OS running in a virtualized environment.

An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Jun...

CVE-2017-2343 SRX Series: Hardcoded credentials in Integrated UserFW feature.

The Integrated User Firewall UserFW feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user profiles on top of the existing firewall polices. As part of an internal security review of the UserFW services authentication API,...

CVE-2017-2349 SRX Series: Command injection vulnerability in SRX IDP feature.

A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS 12.1X44 prior to 12.1X44-D60; 12.1X46...

CVE-2017-2346 MS-MPC or MS-MIC crash when passing large fragmented traffic through an ALG

An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway ALG. Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or stateful-firewall rules are configured with...

CVE-2017-2345

Technical details for CVE-2017-2345 are not publicly available in the provided connected documents. Monitor for updates; the supplied materials do not specify affected Junos releases beyond the initial description.

CVE-2017-10604

CVE-2017-10604 affects Juniper SRX Series devices running Junos OS in cluster mode. The issue arises when account lockout is enabled: an unauthenticated user making failed root login attempts can trigger root lockout, which in turn causes cluster sync or failover errors. Affected releases are SRX...

CVE-2017-10603

The CVE describes an XML injection vulnerability in Junos OS CLI that can be exploited by a locally authenticated user to elevate privileges and execute commands as root. The issue stems from improper handling/validation of XML content received by the CLI, enabling arbitrary command execution wit...

Juniper Junos Administrator Privilege Acquisition Vulnerability (CNVD-2017-21782)

Juniper Junos is a network operating system dedicated to the company's hardware systems. An administrator privilege acquisition vulnerability exists in the Juniper Junos command line window, which could be exploited by a local attacker to gain administrator privileges...

Juniper Junos elevation of privilege vulnerability (CNVD-2017-21780)

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. An elevation of privilege vulnerability exists in Juniper Networks Junos, which allows a remotely authorized attacker to exploit the vulnerability to elevate privileges and take full control of th...

Juniper Junos Default Password Vulnerability

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. A default password vulnerability exists in the Juniper Junos SRX Series. An attacker could exploit this...

Juniper Junos Authentication Bypass Vulnerability (CNVD-2016-09599)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. Juniper Junos has an authentication bypass vulnerability. A remote attacker could use this vulnerability to acce...

Juniper Junos Local Elevation of Privilege Vulnerability (CNVD-2015-00386)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. Juniper Junos has a local elevation of privilege vulnerability that can be exploited by a local attacker to gai...

Juniper Junos Code Execution Vulnerability (CNVD-2017-21778)

Juniper Junos is a network operating system dedicated to the company's hardware systems. A code execution vulnerability exists in the Juniper Junos SNMP service that can be exploited by a remote attacker to submit a special request and execute arbitrary code...

Juniper Junos Denial of Service Vulnerability (CNVD-2017-21781)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. A denial of service vulnerability exists in Juniper Junos. An attacker could exploit this vulnerability to cause...

Juniper Networks Junos OS DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in sendmsg. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"...

Juniper Networks Junos OS SNMPD RCE Vulnerability

Junos OS is prone to a remote code execution vulnerability when receiving a crafted SNMP packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Juniper Networks Junos OS Multiple OpenSSL Vulnerabilities

Junos OS is prone to multiple vulnerabilities in OpenSSL SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

Juniper Networks Junos OS MS-MPC or MS-MIC DoS Vulnerability

Junos OS is prone to a denial of service vulnerability when parsing large fragmented traffic through an ALG. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Junos OS SRX Series: Hardcoded Credentials Vulnerability

Junos OS on SRX series contain hardcoded credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...