77 matches found
CVE-2020-1688
Technical details (affected products/versions/impact/fix) are not publicly available in the provided connected documents. Monitor for updates.
Juniper Junos Privilege Escalation Vulnerability (JSA10977)
The version of Junos OS installed on the remote host is NFX prior to 18.2R1. It is, therefore, affected by a privilege escalation vulnerability as referenced in the JSA10977 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...
CVE-2020-1613
A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...
Design/Logic Flaw
A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...
CVE-2020-1613 Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.
A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...
The vulnerability of Junos OS router NFX Series lies in insufficient validation of input data, allowing attackers to gain full control over the system.
The vulnerability of Junos OS router of the NFX Series exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the system...
NFX Series: Authentication Bypass Vulnerability Juniper Device Manager (JDM) (JSA10955)
An authentication bypass vulnerability exists in Junos Device Manager. An authenticated, local attacker can exploit this to bypass regular security controls and take control of the system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid130264; scriptversion"1.3";...
Juniper Networks NFX Series Junos OS Input Validation Error Vulnerability
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability in Juniper Networks NFX Series with Junos OS prior to version 18.2R1 can be...
The vulnerability of the Junos OS router series in connection with authentication process errors allows attackers to gain access to the Junos Device Manager application and exercise full control over the system.
The vulnerability of the Junos OS router of the NFX Series is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to the Junos Device Manager JDM and gain full control over the system...
CVE-2019-0070
An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...
CVE-2019-0070
An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...
Design/Logic Flaw
On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...
Input validation
An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...
CVE-2019-0069 Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text
On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...
CVE-2019-0070
CVE-2019-0070 affects Juniper Networks Junos OS on NFX Series prior to 18.2R1. The issue is an improper input validation weakness that allows a local attacker to elevate privileges and take control of the entire system. Affected component: Junos OS on NFX Series; root cause: input validation fail...
CVE-2019-0070 Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.
An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...
UBUNTU-CVE-2019-1010057
nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffileinline.c:83, minilzo.c redistributed. The attack vector is: nfdump must read and process a specially crafted file...
NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS (JSA10878)
According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. With an insecure SSHD configuration in Juniper Device Manager, a remote, unauthenticated attacker can gain access if any of the passwords on the system are empty. The affected SSHD...
Juniper JSA10935
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the JSA10935 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version numbe...
Code injection
In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...