CVE-2025-30654

CVE-2025-30654 affects Junos OS and Junos OS Evolved. A local, low-privileged attacker with CLI access can exploit the UI via a specific show mgd command to view sensitive information, including password hashes. Affected versions include Junos OS pre-21.4R3-S10, 22.2 before 22.2R3-S5, 22.4 before...

CVE-2025-30655

CVE-2025-30655 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is in the Routing Protocol Daemon (rpd) and causes a local, low-privileged attacker to trigger a Denial-of-Service by running the CLI command "show bgp neighbor" when BGP RIB sharding and update-threading are enabled...

CVE-2022-22202

The CVE concerns Juniper Networks Junos OS on PTX Series (including PTX1000, PTX3000 NextGen, PTX5000, PTX10002-60C, PTX10008, PTX10016). It is an improper handling of exceptional conditions that allows an unauthenticated MPLS-based attacker to trigger a DoS by crashing the dcpfe process and rest...

CVE-2023-22407

The CVE-2023-22407 entry describes an Incomplete Cleanup vulnerability in Juniper Networks Junos OS and Junos OS Evolved, affecting the Routing Protocol Daemon (rpd). The issue can allow an adjacent, unauthenticated attacker to cause a Denial of Service (DoS) by triggering an rpd crash when an MP...

CVE-2023-22416

CVE-2023-22416 : A buffer overflow in the SIP ALG flowd component of Juniper Networks Junos OS on MX and SRX Series enables network-based, unauthenticated DoS on receipt of a malformed SIP packet. Affected: Junos OS releases on MX/SRX with SIP ALG enabled (various 20.4, 21.x, 22.x train versions ...

CVE-2023-28979

CVE-2023-28979 affects Juniper Networks Junos OS kernels across multiple branches, enabling an adjacent attacker to bypass an integrity check in 6PE scenarios when an additional integrity check is configured. The issue causes specific malformed IPv6 packets to fail the integrity check and be forw...

CVE-2023-44185

CVE-2023-44185 affects Juniper Junos OS and Junos OS Evolved. It is an Improper Input Validation in the routing protocol daemon (rpd) that allows an attacker to cause a Denial of Service by processing a specific malformed ISO VPN BGP UPDATE packet. Continued receipt yields a sustained DoS on the ...

CVE-2023-44198

CVE-2023-44198 affects Juniper Networks Junos OS SIP ALG on SRX Series and MX Series. The vulnerability stems from an improper check for unusual or exceptional conditions, enabling an unauthenticated, network-based attacker to cause an integrity impact in connected networks. When SIP ALG is enabl...

CVE-2023-44177

CVE-2023-44177 affects Juniper Networks Junos OS and Junos OS Evolved. It is a stack-based buffer overflow in the CLI command processing that allows a low-privileged attacker to cause a Denial of Service by executing targeted CLI commands. Repeated actions can sustain DoS. Affected versions inclu...

CVE-2024-39517

The CVE-2024-39517 issue affects Juniper Networks Junos OS and Junos OS Evolved, specifically the Layer 2 Address Learning Daemon (l2ald). In EVPN/VXLAN deployments, processing a high volume of certain Layer 2 packets can cause the Routing Protocol Daemon (rpd) to consume all CPU resources, leadi...

CVE-2024-39525

CVE-2024-39525 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an improper handling of exceptional conditions in the routing protocol daemon (rpd) that can be triggered by an unauthenticated network-based attacker sending a crafted BGP packet, causing rpd to crash and restart...

CVE-2024-39532

Summary: CVE-2024-39532 affects Juniper Networks Junos OS and Junos OS Evolved. Local, authenticated attackers with high privileges can access sensitive information stored in a log file when a specific operation is performed, due to insertion of sensitive information into the log. Affected versio...

CVE-2025-30652

CVE-2025-30652 affects Juniper Junos OS and Junos OS Evolved. The vulnerability is an improper handling of exceptional conditions in the routing protocol daemon (rpd) that allows a local, low-privilege attacker to trigger a Denial of Service by executing a specific CLI command when asregex-optimi...

CVE-2026-33799

CVE-2026-33799 describes an Out-of-bounds Write in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved. An authenticated remote attacker can send specific valid SNMPv3 queries to trigger a memory leak, causing snmpd memory exhaustion over time, a resulting process crash, and...

CVE-2021-31365

CVE-2021-31365 describes an Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on the EX2300, EX3400 and EX4300 Series. An adjacent attacker sending a stream of specific Layer 2 frames can cause an Aggregated Ethernet (AE) interface to go down, resulting in a Denial of S...

CVE-2023-22415

CVE-2023-22415 is an out-of-bounds write in the H.323 ALG of Junos OS that causes the flowd daemon to crash and can lead to a DoS when specific H.323 packets are received concurrently on MX and SRX Series devices. Affected versions include Junos OS on MX/SRX prior to: 19.4R3-S10; 20.2R3-S6; 20.3R...

CVE-2023-28959

The CVE-2023-28959 entry affects Juniper Networks Junos OS on QFX10002. The issue is an improper check/handling of exceptional conditions in packet processing, triggered by a specially malformed packet sent by an unauthenticated, adjacent attacker on the local broadcast domain. Exploitation wedge...

CVE-2023-28961

CVE-2023-28961 affects Juniper Networks Junos OS on ACX Series devices. The vulnerability arises in IPv6 firewall filter processing where a filter term using from next-header ah cannot be installed in the packet forwarding engine (PFE) due to an unsupported IP-protocol (51) match, potentially all...

CVE-2023-28970

Technical details about CVE-2023-28970 are not publicly available in the provided connected documents. Monitor for updates; no new information on affected versions, root cause specifics, exploitation status, or remediation is present here.

CVE-2023-44201

Summary: CVE-2023-44201 affects Juniper Networks Junos OS and Junos OS Evolved. A local authenticated attacker can exploit an incorrect permission assignment for a critical resource to read configuration changes, potentially exposing password hashes during password changes. Affected products/vers...

CVE-2024-47497

CVE-2024-47497 affects Juniper Junos OS on SRX, QFX, MX and EX Series. The vulnerability is an Uncontrolled Resource Consumption in the httpd process when handling certain HTTPS requests, causing unauthenticated, network-based DoS via resource exhaustion and device restart. Affected versions incl...

CVE-2024-47503

CVE-2024-47503 affects Juniper Junos OS on SRX4600/SRX5000 series. An unauthenticated, logically adjacent attacker can trigger a DoS by sending a sequence of specific PIM packets, causing flowd to crash and restart in multicast scenarios. Affected versions are those listed as 'before' certain rel...

CVE-2025-21596

CVE-2025-21596 concerns Junos OS on SRX1500, SRX4100 and SRX4200. The issue stems from improper handling of exceptional conditions in the CLI when executing the local, low-privilege attacker’s command “show chassis environment pem,” which crashes the chassis daemon (chassisd) and restarts it, cre...

CVE-2025-30646

CVE-2025-30646 affects Junos OS and Junos OS Evolved. A Signed to Unsigned Conversion Error in the Layer 2 Control Protocol daemon (l2cpd) allows an unauthenticated adjacent attacker to cause the l2cpd process to crash and restart by sending a specially formed LLDP TLV, yielding a Denial of Servi...

CVE-2004-0468

CVE-2004-0468 describes a memory leak in Juniper’s JUNOS Packet Forwarding Engine (PFE) that can be exploited remotely by IPv6 packets to cause memory exhaustion and router reboot (DoS). OpenVAS notes a DoS vulnerability in Juniper Junos OS DoS vulnerability (CVE-2004-0468) tied to memory leakage...

CVE-2022-22223

CVE-2022-22223 affects Juniper Networks Junos OS on QFX10000 Series devices configured as transit IP/MPLS PHP nodes with LAG interfaces. An improper validation of an input index/position/offset allows crafted IP packets (IPv4 or IPv6) to detach multiple interfaces in a LAG, causing a DoS; sustain...

CVE-2023-28976

This CVE involves an Improper Check for Unusual or Exceptional Conditions in the PFE of Juniper Networks Junos OS on MX Series. A network-based attacker can trigger a DoS by sending traffic that exceeds the DDoS threshold, causing the ingress PFE to crash and restart and potentially sustaining a ...

CVE-2023-44194

CVE-2023-44194 affects Juniper Networks Junos OS. The vulnerability is due to incorrect default permissions in a system directory, allowing an unauthenticated, locally-present attacker to create a backdoor with root privileges. Affected versions include all before 20.4R3-S5, 21.1 before 21.1R3-S4...

CVE-2023-44197

CVE-2023-44197 describes an Out-of-Bounds Write in Juniper’s Routing Protocol Daemon (rpd) that allows an unauthenticated, network-based attacker to cause a DoS by crashing the rpd while processing BGP route updates. Affected products are Junos OS and Junos OS Evolved. Supported versions include:...

CVE-2022-22238

The vulnerability CVE-2022-22238 affects Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated, adjacent attacker can trigger a Denial of Service by sending a malformed RESV message for a protected LSP, causing an incorrect internal state and an rpd core. Affected are Junos OS and Ju...

CVE-2023-1697

The CVE-2023-1697 issue is an Improper Handling of Missing Values in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS . It causes a crash of the dcpfe process and a sustained Denial of Service (DoS) when a specific malformed ethernet frame is received. Affected products/versions in...

CVE-2023-36842

Junos OS vulnerability CVE-2023-36842 affects the DHCP daemon (jdhcpd). An improper check for unusual conditions allows an adjacent, unauthenticated attacker sending a specific DHCP packet to a non-configured interface (on devices with forward-snooped-client) to trigger an infinite loop, causing ...

CVE-2020-1614

CVE-2020-1614 : A hard-coded credentials vulnerability affects the Juniper Networks NFX250 Series vSRX VNF. It targets the vSRX VNF instance on versions prior to 19.2R1 and occurs when the root password has not been configured, allowing an attacker with access to an administrative service (e.g., ...

CVE-2021-0248

CVE-2021-0248 affects Juniper Networks Junos OS on NFX Series devices where a hard-coded credential flaw allows an attacker to take over any instance of an NFX deployment . The vulnerability is exploitable only via administrative interfaces . Affected scope is Junos OS versions prior to 19.1R1 on...

CVE-2022-22208

CVE-2022-22208 describes a Use After Free in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (rdp) triggered by BGP session flaps. The race condition causes rpd crashes, leading to a network-based Denial of Service, with impact depending on the affected release. Affected ra...

CVE-2023-44181

The vulnerability CVE-2023-44181 affects Juniper Networks Junos OS on QFX5k devices, caused by an improperly implemented security check in storm control. When storm control is enabled and ICMPv6 traffic is present, packets can be punted to the ARP queue, creating an L2 loop that can lead to DoS c...

CVE-2024-39565

CVE-2024-39565 : J-Web XPath Injection in Junos OS allows an unauthenticated, network-based attacker to execute remote commands on the target device. Affected Junos OS versions include all before 21.2R3-S8; 21.4 before 21.4R3-S7; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2...

CVE-2025-21592

The CVE-2025-21592 entry describes an information-disclosure vulnerability in Juniper Networks Junos OS for SRX Series. A local, low-privilege user with CLI access can view contents of sensitive files by executing either show services advanced-anti-malware or show services security-intelligence, ...

CVE-2023-28962

The CVE-2023-28962 issue is a Junos OS J-Web vulnerability (upload-file.php) caused by improper authentication, enabling an unauthenticated, network-based attacker to upload arbitrary files to temporary folders. Affected products/versions include Juniper Networks Junos OS prior to 19.4R3-S11; 20....

CVE-2023-44184

The CVE-2023-44184 issue affects Juniper Networks Junos OS and Junos OS Evolved in the mgd (management daemon) component. A memory-buffer bound check violation allows a network-based, authenticated, low-privileged attacker to execute a specific NETCONF command that can cause CPU denial of service...

CVE-2023-28974

CVE-2023-28974 affects Juniper Networks Junos OS on MX Series. The vulnerability is in the bbe-smgd process and stems from an improper check for unusual or exceptional conditions, allowing an unauthenticated adjacent attacker to crash bbe-smgd by sending a specifically malformed ICMP packet. Impa...

CVE-2023-44178

CVE-2023-44178 describes a stack-based buffer overflow in the CLI command processing of Juniper Networks Junos OS. A low-privilege attacker can trigger the overflow by executing specific CLI commands, resulting in a Denial of Service (DoS); repeated actions cause a sustained DoS. Affected Junos O...

CVE-2023-44193

CVE-2023-44193 affects Juniper Networks Junos OS on MX Series hardware. The issue is an improper release of memory before removing the last reference in the Packet Forwarding Engine (PFE) that, when CFM is enabled in a VPLS scenario and a specific LDP-related command is executed, can cause an FPC...

CVE-2024-39539

CVE-2024-39539 affects Junos OS on MX Series (pre-21.2R3-S6, pre-21.4R3-S6, pre-22.1R3-S5, pre-22.2R3-S3, pre-22.3R3-S2, pre-22.4R3, pre-23.2R2). It is a Missing Release of Memory after Effective Lifetime vulnerability causing memory leaks when subscribers log in repeatedly, ultimately triggering...

CVE-2024-47506

CVE-2024-47506 describes a deadlock in Juniper Networks Junos OS on SRX Series. When ATP Cloud inspection processes large traffic, the packet forwarding engine (PFE) can enter a deadlock, causing a PFE crash and restart and enabling a network-based attacker to trigger a DoS. Affected versions are...

CVE-2023-22409

This CVE concerns Juniper Networks Junos OS NAT functionality where an unchecked input for a loop condition in the NAT library can crash SPC3 on SRX/MX devices, causing a DoS when an inconsistent deterministic NAT configuration is used and a specific CLI command is executed. The issue is triggere...

CVE-2023-28964

CVE-2023-28964 affects Juniper Networks Junos OS and Junos OS Evolved. The vulnerability arises from an improper handling of a length parameter in the routing protocol daemon (RPD) that processes BGP flowspec updates. A network-based, unauthenticated attacker can send malformed BGP flowspec data ...

CVE-2023-28975

CVE-2023-28975 affects Juniper Networks Junos OS: an Un Unexpected Status Code or Return Value vulnerability in the kernel can cause a DoS when certain USB devices are plugged into the routing-engine (RE). An unauthenticated attacker with physical access can crash the kernel, forcing reboots and ...

CVE-2023-36838

CVE-2023-36838 affects Juniper Networks Junos OS on SRX Series, with an out-of-bounds read in the flow processing daemon (flowd) that a local, authenticated, low-privilege attacker can exploit by issuing a specific CLI command to crash flowd and cause a DoS. The vulnerability can produce a core d...

CVE-2024-39527

CVE-2024-39527 describes an exposure of sensitive information vulnerability in the CLI of Juniper Networks Junos OS on SRX Series devices. A local, low-privileged user with CLI access can view protected files on the file system through crafted CLI commands, enabling information disclosure as desc...