CVE-2017-10611

CVE-2017-10611 describes a crash of the pfem process or FPC when extended statistics are enabled and interface statistics are fetched (e.g., SNMP GET), on specific Juniper platforms. Affected devices include EX2200, EX3300, XRE200 and MX Series routers with MPC7E/8E/9E PFEs, with extended-statist...

CVE-2017-2348

The CVE-2017-2348 issue affects Juniper Networks Junos OS where the jdhcpd daemon may experience high CPU utilization or crash when handling invalid IPv6 UDP packets, leading to a denial of service by interrupting DHCP service. Affected releases include Junos OS 14.1X53 before certain D-branch fi...

CVE-2021-31353

Summary : CVE-2021-31353 is a vulnerability in Juniper Networks Junos OS and Junos OS Evolved where processing a crafted BGP update can crash the Routing Protocol Daemon (RPD), causing a DoS. The issue is tied to an improper handling of exceptional conditions and affects specific Ju nis OS/Junos ...

CVE-2021-31371

CVE-2021-31371 affects Juniper Networks Junos OS on QFX5110/5120/5200/5210 and QFX5100 with QFX 5e Series image. The issue: internal RE-to-PFE 128.0.0.0/2 traffic may be forwarded to an egress interface, leaking configuration data (eg, heartbeats, kernel versions) to the Internet, across multiple...

CVE-2022-22175

The CVE covers an Improper Locking vulnerability in the SIP ALG of Juniper Junos OS on MX Series and SRX Series, causing the flowd daemon to crash and trigger DoS when specific SIP traffic is processed with SIP ALG enabled. Affected versions include Junos OS: 20.4 (before 20.4R3‑S1), 21.1 (before...

CVE-2022-22213

CVE-2022-22213 affects Juniper Networks Junos OS and Junos OS Evolved. A vulnerability in the Routing Protocol Daemon (RPD) handling of undefined values can allow an unauthenticated, network-based attacker to crash the RPD by sending a crafted BGP update while the host is under heavy load, leadin...

CVE-2022-22224

The CVE-2022-22224 issue affects Juniper Networks Junos OS and Junos OS Evolved, where processing a malformed OSPF TLV can cause the periodic packet management daemon (PPMD) to enter an infinite loop. This unblocks an unauthenticated adjacent attacker to induce a DoS by affecting OSPF neighbor re...

CVE-2022-22234

Summary (CVE-2022-22234) An Improper Preservation of Consistency Between Independent Representations of Shared State in the Packet Forwarding Engine (PFE) of Juniper Junos OS can cause a DoS when the device is very busy, e.g., during CLI show commands, potentially marking SFPs as unplugged and af...

CVE-2022-22250

CVE-2022-22250 affects Juniper Networks Junos OS and Junos OS Evolved PFE. An improper control of a resource through its lifetime allows an unauthenticated adjacent attacker to cause a DoS via memory corruption when EVPN-MPLS MAC learned locally is deleted as remotely learned, potentially causing...

CVE-2023-44182

CVE-2023-44182 affects Juniper Networks Junos OS and Junos OS Evolved, via an unchecked return value in multiple user interfaces (CLI, XML API, XML Management Protocol, NETCONF, gNMI, and J-Web) that can cause privilege demotion/elevation based on operator actions. Affected are Junos OS versions ...

CVE-2023-44199

CVE-2023-44199 is a vulnerability in Juniper Networks Junos OS on MX Series where an improper check in the Packet Forwarding Engine (PFE) can be triggered by network-based, unauthenticated attackers to cause a Denial of Service via prolonged routing churn when PTP is configured. Affected MX Serie...

CVE-2024-21619

CVE-2024-21619 describes a vulnerability in Juniper Networks Junos OS on SRX and EX series where an unauthenticated attacker can access sensitive configuration information via the J-Web interface. The root cause is a Missing Authentication for a Critical Function combined with a Generation of Err...

CVE-2026-57031

Summary of CVE-2026-57031 (Junos OS MX Series): A vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series devices allows adjacent subscribers configured on static interfaces to bypass ingress firewall filters, disabling both protocol-level and upstream bandwi...

CVE-2007-6372

Technical details for CVE-2007-6372 are not provided in the connected documents. Public information in the Initial Description is high-level. Monitor for updates from official advisories to obtain affected products, vectors, and fixes.

CVE-2013-4685

Juniper Junos OS contains a buffer overflow in flowd when processing HTTP messages (CVE-2013-4685). Affected are SRX devices with Captive Portal and UAC enforcer role across listed revisions: 10.4 before 10.4S14; 11.4 before 11.4R7; 12.1 before 12.1R6; and 12.1X44 before 12.1X44-D15. The vulnerab...

CVE-2014-2711

CVE-2014-2711 is a documented persistent XSS vulnerability in Juniper Junos J-Web. The J-Web interface on Junos platforms (across multiple branches and releases listed in the CVE) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with impact limited to partia...

CVE-2018-0018

The CVE affects SRX Series devices running Junos OS where IDP policies are compiled. A crafted packet may bypass firewall rules during IDP policy compilation, causing information disclosure and potential control of the target or protected devices. Affected Junos OS releases are 12.1X46 before D60...

CVE-2018-0025

CVE-2018-0025 affects Juniper SRX Series devices when HTTP/HTTPS pass-through authentication is used; credentials in the initial session may be captured during follow-on requests by MITM or compromised servers. Affected releases: SRX 12.1X46 before D67, 12.3X48 before D25, 15.1X49 before D35. FTP...

CVE-2019-0009

Technical details about CVE-2019-0009 are not publicly available in the provided Connected documents. Monitor for updates from the sources referenced (e.g., Juniper JSA/JPD, CVE feeds) for new information or fixes.

CVE-2019-0057

CVE-2019-0057 : Juniper Junos OS has an improper authorization vulnerability that allows a local authenticated attacker to bypass security controls and take control of the Junos Device Manager (JDM). Affected: Junos OS versions prior to 18.2R1 and 18.2X75-D5. Documents confirm local vector with h...

CVE-2021-31355

CVE-2021-31355 is a stored cross-site scripting (XSS) vulnerability in Juniper Networks Junos OS captive portal UI. A remote authenticated user can inject script/HTML to steal data from web admin sessions and possibly trick other admins into actions. Affected: Junos OS versions across multiple re...

CVE-2021-31365

CVE-2021-31365 describes an Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on the EX2300, EX3400 and EX4300 Series. An adjacent attacker sending a stream of specific Layer 2 frames can cause an Aggregated Ethernet (AE) interface to go down, resulting in a Denial of S...

CVE-2023-22406

CVE-2023-22406 affects Juniper Networks Junos OS and Junos OS Evolved. It is a memory-leak/DoS issue in the kernel that manifests when a peer interface flaps in a Segment Routing scenario using OSPF, causing continuous memory growth in rpd and eventual rpd crash. Affected versions include Junos O...

CVE-2024-39514

CVE-2024-39514 affects Junos OS and Junos OS Evolved. An attacker—adjacent, unauthenticated—can trigger a crash of the Routing Protocol Daemon (rpd) by sending specific traffic on devices with EVPN-VPWS and IGMP-snooping enabled, causing a DoS. Affected ranges are listed per release: Junos OS ver...

CVE-2024-39517

The CVE-2024-39517 issue affects Juniper Networks Junos OS and Junos OS Evolved, specifically the Layer 2 Address Learning Daemon (l2ald). In EVPN/VXLAN deployments, processing a high volume of certain Layer 2 packets can cause the Routing Protocol Daemon (rpd) to consume all CPU resources, leadi...

CVE-2025-21593

Summary (supported by provided documents): CVE-2025-21593 is an improper resource lifecycle control vulnerability in Juniper Junos OS and Junos OS Evolved dengan rpd, exploitable by an unauthenticated network attacker on devices with SRv6 enabled. The attacker can send malformed BGP UPDATE packet...

CVE-2025-30654

CVE-2025-30654 affects Junos OS and Junos OS Evolved. A local, low-privileged attacker with CLI access can exploit the UI via a specific show mgd command to view sensitive information, including password hashes. Affected versions include Junos OS pre-21.4R3-S10, 22.2 before 22.2R3-S5, 22.4 before...

CVE-2004-0467

CVE-2004-0467 affects Juniper Networks JUNOS software (versions 5.x through 7.x). A remote attacker can cause a denial of service by sending a large volume of MPLS packets that are not filtered or verified before reaching the Routing Engine, leading to reduced processing speed for other packets a...

CVE-2013-7313

CVE-2013-7313 affects the OSPF implementation in Juniper Junos (through 13.x, JunosE) and ScreenOS (through 6.3.x). The issue arises from not considering duplicate Link State ID values in Link State Advertisements (LSAs) when updating the LSA database, enabling remote attackers to cause routing d...

CVE-2014-3825

CVE-2014-3825 affects Juniper SRX Series devices running Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10. When an Application Layer Gateway (ALG) is enabled, remote attackers can cause a denial of ser...

CVE-2017-10602

CVE-2017-10602 describes a buffer overflow in Junos OS CLI that can allow a local authenticated user with read-only CLI access to execute code with root privileges. Affected releases include Junos OS versions across multiple lines of products: 14.1X53 (prior to 14.1X53-D46 on EX2200/VC, EX3200, E...

CVE-2017-2349

The CVE-2017-2349 entry describes a remote command injection in Juniper Junos OS SRX series IDP feature. Affected releases include Junos OS 12.1X44 (before 12.1X44-D60), 12.1X46 (before 12.1X46-D50), 12.1X47 (before 12.1X47-D30, D35), 12.3X48 (before 12.3X48-D20, D30), and 15.1X49 (before 15.1X49...

CVE-2018-0004

CVE-2018-0004 affects Junos OS kernel: Kernel Denial of Service in the register/schedule interrupt handler triggered by a sustained sequence of normal transit traffic. Affects Junos OS releases listed in the entry (e.g., 12.1X46 prior to -D50; 12.3X48 prior to -D30; 12.3R before -R12-S7; 14.1 bef...

CVE-2018-0021

CVE-2018-0021 affects Junos OS when MacSec CKN/CAK keys are configured with short values. If all 64 CKN digits or all 32 CAK digits are not configured, remaining digits auto-configure to 0, increasing the feasibility of dictionary/brute-force attacks to recover key material via spoofed packets. A...

CVE-2018-0043

CVE-2018-0043 affects Juniper Networks Junos OS RPD daemon. Receipt of specific MPLS packets can crash RPD and may allow remote code execution, impacting both IPv4 and IPv6 and exploitable only within the MPLS domain (end users on CE devices cannot trigger it). Affected releases include numerous ...

CVE-2018-0054

CVE-2018-0054 affects Juniper Networks Junos OS on QFX5000 Series and EX4600 switches. A high rate of Ethernet pause frames or ARP storms on the management interface (fxp0) can cause egress congestion, leading to routing-protocol drops (e.g., BGP) and peering flaps. Affected releases include many...

CVE-2018-0058

CVE-2018-0058 affects Juniper Networks Junos OS on MX Series, caused by handling of BroadBand Edge (BBE) client routes introduced with Tomcat (Next Generation Subscriber Management). Receipt of a specially crafted IPv6 exception packet can trigger a kernel crash (vmcore), leading to device reboot...

CVE-2019-0005

CVE-2019-0005 affects Juniper Junos OS on EX and QFX series (EX2300/3400/4600; QFX3K/5K). The vulnerability is that firewall filter configuration cannot match IPv6 extension headers, potentially allowing IPv6 packets that should be blocked to be forwarded; IPv4 filtering is unaffected. Affected r...

CVE-2020-1601

Summary of CVE-2020-1601 (Junos OS pccd DoS) Affects Juniper Networks Junos OS running as Path Computation Client (PCC) in a PCEP environment. The issue is caused by insufficient input validation in Junos’ Path Computation Element Protocol daemon (pccd), allowing an attacker to send certain malfo...

CVE-2021-0275

The CVE-2021-0275 entry identifies a Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web that can hijack another active user session and potentially grant full device control if the compromised user has root privileges. Affected are Junos OS versions across multiple series...

CVE-2021-0278

CVE-2021-0278 is an Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS that allows a locally authenticated attacker to escalate to root. Affected Junos OS versions include 19.3R1 and later (various 19.3/19.4/20.x/21.x releases listed in sources). The connected documents...

CVE-2022-22202

The CVE concerns Juniper Networks Junos OS on PTX Series (including PTX1000, PTX3000 NextGen, PTX5000, PTX10002-60C, PTX10008, PTX10016). It is an improper handling of exceptional conditions that allows an unauthenticated MPLS-based attacker to trigger a DoS by crashing the dcpfe process and rest...

CVE-2023-22391

CVE-2023-22391 affects Juniper Networks Junos OS on ACX2K Series. The issue is a class-of-service (CoS) queue management flaw that misroutes specific high-priority traffic (BGP, PIM, ICMP/ICMPv6 ND, ISAKMP) into a queue, enabling an unauthenticated network-based attacker to cause a DoS by sustain...

CVE-2023-22407

The CVE-2023-22407 entry describes an Incomplete Cleanup vulnerability in Juniper Networks Junos OS and Junos OS Evolved, affecting the Routing Protocol Daemon (rpd). The issue can allow an adjacent, unauthenticated attacker to cause a Denial of Service (DoS) by triggering an rpd crash when an MP...

CVE-2023-28970

Technical details about CVE-2023-28970 are not publicly available in the provided connected documents. Monitor for updates; no new information on affected versions, root cause specifics, exploitation status, or remediation is present here.

CVE-2023-44203

CVE-2023-44203 affects Juniper Junos OS Packet Forwarding Engine (pfe) on QFX5000 Series and EX2300/EX3400/EX4100/EX4400/EX4600. Affected condition: an IGMP-specific packet in an isolated VLAN can be duplicated to all ports in the primary VLAN, causing packet flooding and a DoS. Affected platform...

CVE-2024-21617

CVE-2024-21617 affects Juniper Networks Junos OS (NSR-enabled devices). A BGP flap can cause memory leak leading to DoS; reboot temporarily restores services. Affected versions include 21.2R3-S5 and earlier, 21.3R3-S4 and earlier, 21.4R3-S4 and earlier, 22.1R3-S2 and earlier, 22.2R3-S2 and earlie...

CVE-2024-39528

CVE-2024-39528 — AUse After Free in Juniper Junos OS/Junos OS Evolved Routing Protocol Daemon (rpd) causes a segmentation fault on a specific sequence (routing-instance deactivation + SNMP request), leading to rpd crash and DoS. Affected: Junos OS and Junos OS Evolved. Reported vulnerable version...

CVE-2024-39558

CVE-2024-39558 affects Junos OS and Junos OS Evolved. An Unchecked Return Value in Routing Protocol Daemon (rpd) can be triggered by a specific PIM packet when MoFRR is configured, causing rpd to crash and reboot and leading to DoS. Impact is confirmed on multiple Junos OS/Junos OS Evolved versio...

CVE-2024-47503

CVE-2024-47503 affects Juniper Junos OS on SRX4600/SRX5000 series. An unauthenticated, logically adjacent attacker can trigger a DoS by sending a sequence of specific PIM packets, causing flowd to crash and restart in multicast scenarios. Affected versions are those listed as 'before' certain rel...