CVE-2017-2343

CVE-2017-2343 affects Juniper Junos SRX Series with the Integrated User Firewall (UserFW) authentication API. The root cause is hardcoded credentials in UserFW, enabling an unauthenticated, remote attacker to potentially gain administrative access to the SRX device and compromise connected servic...

PT-2017-11402

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D67 on vSRX or SRX Series Junos OS versions prior to 12.3X48-D50 on vSRX or SRX Series Junos OS versions prior to 15.1X49-D91, 15.1X49-D100 on vSRX or SRX Series Description A specially crafted packet might...

PT-2017-15376

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X44 prior to 12.1X44-D60 Junos OS versions 12.1X46 prior to 12.1X46-D50 Junos OS versions 12.1X47 prior to 12.1X47-D35 Junos OS versions 12.3X48 prior to 12.3X48-D30 Junos OS versions 15.1X49 prior to 15.1X49-D30...

PT-2017-11401

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D65 on SRX series Junos OS versions prior to 12.3X48-D45 on SRX series Junos OS versions prior to 15.1X49-D75 on SRX series Description The issue occurs when a device is configured for account lockout with a...

Juniper Networks Junos OS SRX Series: DHCP DoS Vulnerability

Junos OS on SRX series is prone to a denial of service vulnerability in flowd due to crafted DHCP packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Junos OS SRX Series: Hardcoded Credentials Vulnerability

Junos OS on SRX series contain hardcoded credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

Juniper Networks Junos OS SRX Series: MACsec Failure Vulnerability

Junos OS on SRX300 series are prone to a MACsec failure to report errors. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2017-2538

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.3X48-D30 through 12.3X48-D35 Junos OS versions 15.1X49-D40 through 15.1X49-D50 Description The Integrated User Firewall UserFW feature in Junos OS has a security issue due to hardcoded credentials. This can be exploited by...

CVE-2017-2300

On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a...

CVE-2017-2300

The CVE-2017-2300 issue affects Juniper Networks SRX Series chassis clusters running Junos OS where the flowd daemon on the primary node crashes during multicast session synchronization. Affected versions are Junos OS 12.1X46 before 12.1X46-D65, and 12.3X48 before 12.3X48-D40 and before 12.3X48-D...

CVE-2017-2300

On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a...

PT-2017-15336

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D65 Junos OS versions prior to 12.3X48-D40 Junos OS versions prior to 12.3X48-D60 Description A crash and restart of the flowd daemon on the primary node of an SRX Series chassis cluster may occur when...

CVE-2017-2300: Undefined Security Weakness

On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a...

Juniper Junos SRX Series Gateway Chassis Cluster flowd Multicast Session DoS (JSA10768)

According to its self-reported version number and configuration, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability in the flow daemon flowd when handling multicast session synchronization. An unauthenticated, adjacent attacker can exploit this issue, by...

Juniper Networks Junos OS SRX Series: DoS Vulnerability in flowd

Junos OS on SRX series is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-1278

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

Design/Logic Flaw

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways ALGs enabled allow remote attackers to cause a denial of service CPU consumption, fab lin...

Design/Logic Flaw

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

CVE-2016-1278: Improper Authentication

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

PT-2016-4682

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X46-D50 on SRX Series devices Description The issue allows local users to gain privileges by leveraging the use of the request system software command with the partition option after a failed upgrade to...