Design/Logic Flaw

A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1...

Design/Logic Flaw

A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...

CVE-2020-1638

The CVE-2020-1638 issue affects Juniper Junos OS and Junos OS Evolved FPCs in MX Series (MPC10E/MPC11E) and PTX10001/PTX10003 lines, where processing a specific IPv4 packet can trigger an FPC restart and drop all traffic via the FPC, causing a sustained DoS. Affected ranges include: Junos OS on M...

CVE-2020-1626

CVE-2020-1626 affects Juniper Networks Junos OS Evolved prior to 19.1R1-EVO. A DoS can be triggered by a high-rate sequence of specific packets that crashes the pfemand process (responsible for packet forwarding), causing sustained availability impact. The issue is traffic-triggered and only affe...

CVE-2020-1624 Junos OS Evolved: objmon logs may leak sensitive information

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1...

CVE-2020-1623 Junos OS Evolved: ev.ops file may leak sensitive information

A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1...

CVE-2020-1624

CVE-2020-1624 affects Junos OS Evolved prior to 19.1R1. A local, authenticated user can access raw objmon configuration files and obtain hashed values of login passwords and shared secrets, leaking sensitive information. The impact is confined to confidentiality of credentials via object monitori...

CVE-2020-1621

CVE-2020-1621 affects Juniper Networks Junos OS Evolved prior to 19.3R1. A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces, indicating a confidentiality impact through leakage of credentials. The vulnerability originates from exposed log/tra...

CVE-2020-1622

Junos OS Evolved is affected. A local, authenticated user can access the EvoSharedObjStore and obtain hashed login passwords and shared secrets, leaking confidential data. Affected versions are all prior to 19.1R1; remediation is to upgrade to 19.1R1 or later. Exploitation status is not detailed ...

CVE-2020-1620 Junos OS Evolved: Configd leaks hashes via log file and is world readable

A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...

Junos OS Multiple vulnerabilities (JSA10981)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities: - When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable...

CVE-2020-1609

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

Code injection

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may remotely take over the code execution of the JDHDCP process. This iss...

Design/Logic Flaw

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may then arbitrarily execute commands as root on the target device. This...

Design/Logic Flaw

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1609 Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1609

CVE-2020-1609 describes a vulnerability in Juniper JDHCPD (IPv6 in relay mode) that allows an attacker to arbitrarily execute commands as root on target devices. Affected software includes Junos OS and Junos OS Evolved versions listed in the CVE description (various 15.1, 16.x, 17.x, 18.x, and 19...