PT-2020-5931

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 18.1R3-S9 Junos OS versions prior to 18.2R3-S3 Junos OS versions prior to 18.3R2-S4 Junos OS versions prior to 18.3R3-S1 Junos OS versions prior to 18.4R2-S5 Junos OS versions prior to 18.4R3 Junos OS versions prior...

srx.com.sg Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1142843 Security Researcher ELProfesor Helped patch 2786 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting srx.com.sg website and...

Juniper Networks Junos OS on SRX Series License Issue Vulnerability

Juniper Networks SRX Series is a set of SRX Series service gateway appliances from Juniper Networks, U.S.A. Junos OS is a network operating system dedicated to the company's hardware devices. A security vulnerability exists in Juniper Networks Junos OS SRX Series. An attacker could exploit the...

CVE-2020-1637

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...

CVE-2020-1634

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1634

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1637

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...

CVE-2020-1613

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

Design/Logic Flaw

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

Design/Logic Flaw

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...

Design/Logic Flaw

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1637 Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...

CVE-2020-1637

CVE-2020-1637 concerns a bypass of Unified Access Control (UAC) on Juniper Networks SRX Series running Junos OS Enforcer. The root cause is when the Infranet Controller IP range is configured as an IP address range instead of an IP address/netmask, which can allow a user to access network resourc...

CVE-2020-1634

CVE-2020-1634 affects Junos OS on High-End SRX Series: certain configurations allow a SPC receiving genuine multicast traffic to core, causing all FPCs in the chassis to reset and resulting in a Denial of Service. Affected versions include Junos OS 12.3X48-D80 and later, up to but not including 1...

CVE-2020-1634 Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1613 Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

CVE-2020-1637: Authentication Bypass Using an Alternate Path or Channel

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...

PT-2020-4140

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 12.3X48 prior to 12.3X48-D100 Juniper Networks Junos OS on SRX Series versions 15.1X49 prior to 15.1X49-D210 Juniper Networks Junos OS on SRX Series versions 17.3 prior to 17.3R2-S5, 17.3R3-S8...

PT-2020-4095

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 12.3X48-D80 through 12.3X48-D95 on High-End SRX Series Description: The issue affects High-End SRX Series devices, in specific configurations, and when specific networking events or operator actions occur, a...

CVE-2020-1634: Integer Overflow or Wraparound

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...