# Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured](https://agentprime.io/advisories/CVE-2020-1643.md)
  `CVE-2020-1643` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-755
- [Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.](https://agentprime.io/advisories/CVE-2020-1641.md)
  `CVE-2020-1641` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Jul 2020 · Tags: Race condition
- [Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.](https://agentprime.io/advisories/CVE-2020-1640.md)
  `CVE-2020-1640` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-1173
- [Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services](https://agentprime.io/advisories/CVE-2020-1631.md)
  `CVE-2020-1631` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 4 May 2020 · Tags: Path traversal
- [Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.](https://agentprime.io/advisories/CVE-2020-1632.md)
  `CVE-2020-1632` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2020 · Tags: CWE-755
- [Junos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service](https://agentprime.io/advisories/CVE-2020-1633.md)
  `CVE-2020-1633` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 9 Apr 2020 · Tags: CWE-20
- [Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.](https://agentprime.io/advisories/CVE-2020-1639.md)
  `CVE-2020-1639` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-703
- [Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.](https://agentprime.io/advisories/CVE-2020-1638.md)
  `CVE-2020-1638` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-467
- [Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability](https://agentprime.io/advisories/CVE-2020-1637.md)
  `CVE-2020-1637` · CVE record: Juniper Networks Junos OS · CVSS 7.2 High · Not analysed yet · Published 8 Apr 2020 · Tags: Authentication bypass
- [Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.](https://agentprime.io/advisories/CVE-2020-1634.md)
  `CVE-2020-1634` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2020 · Tags: Memory corruption
- [Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.](https://agentprime.io/advisories/CVE-2020-1630.md)
  `CVE-2020-1630` · CVE record: Juniper Networks Junos OS · CVSS 5.0 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: Race condition, CWE-264
- [Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.](https://agentprime.io/advisories/CVE-2020-1629.md)
  `CVE-2020-1629` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-366
- [Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces](https://agentprime.io/advisories/CVE-2020-1628.md)
  `CVE-2020-1628` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: Information disclosure
- [Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing](https://agentprime.io/advisories/CVE-2020-1627.md)
  `CVE-2020-1627` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2020
- [Junos OS: Kernel memory leak in virtual-memory due to interface flaps](https://agentprime.io/advisories/CVE-2020-1625.md)
  `CVE-2020-1625` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: Denial of service
- [Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.](https://agentprime.io/advisories/CVE-2020-1619.md)
  `CVE-2020-1619` · CVE record: Juniper Networks Junos OS · CVSS 6.0 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-20, CWE-264
- [Junos OS: EX and QFX Series: Console port authentication bypass vulnerability](https://agentprime.io/advisories/CVE-2020-1618.md)
  `CVE-2020-1618` · CVE record: Juniper Networks Junos OS · CVSS 6.3 Medium · Not analysed yet · Published 8 Apr 2020 · Tags: Authentication bypass
- [Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.](https://agentprime.io/advisories/CVE-2020-1617.md)
  `CVE-2020-1617` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-665
- [Junos OS: vMX: Default credentials supplied in vMX configuration](https://agentprime.io/advisories/CVE-2020-1615.md)
  `CVE-2020-1615` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Apr 2020 · Tags: Hard-coded credentials
- [Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.](https://agentprime.io/advisories/CVE-2020-1613.md)
  `CVE-2020-1613` · CVE record: Juniper Networks Junos OS · CVSS 8.6 High · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-710
- [Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.](https://agentprime.io/advisories/CVE-2020-1609.md)
  `CVE-2020-1609` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Jan 2020 · Tags: Command injection, Memory corruption
- [Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service](https://agentprime.io/advisories/CVE-2020-1608.md)
  `CVE-2020-1608` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2020
- [Junos OS: Cross-Site Scripting (XSS) in J-Web](https://agentprime.io/advisories/CVE-2020-1607.md)
  `CVE-2020-1607` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2020 · Tags: Cross-site scripting (XSS)
- [Junos OS: Path traversal vulnerability in J-Web](https://agentprime.io/advisories/CVE-2020-1606.md)
  `CVE-2020-1606` · CVE record: Juniper Networks Junos OS · CVSS 5.4 Medium · Not analysed yet · Published 15 Jan 2020 · Tags: Path traversal
- [Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.](https://agentprime.io/advisories/CVE-2020-1605.md)
  `CVE-2020-1605` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Jan 2020 · Tags: Command injection, Memory corruption
- [Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets](https://agentprime.io/advisories/CVE-2020-1604.md)
  `CVE-2020-1604` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2020 · Tags: Broken access control
- [Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.](https://agentprime.io/advisories/CVE-2020-1603.md)
  `CVE-2020-1603` · CVE record: Juniper Networks Junos OS · CVSS 8.6 High · Not analysed yet · Published 15 Jan 2020 · Tags: CWE-710
- [Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.](https://agentprime.io/advisories/CVE-2020-1602.md)
  `CVE-2020-1602` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2020 · Tags: Memory corruption
- [Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.](https://agentprime.io/advisories/CVE-2020-1601.md)
  `CVE-2020-1601` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 15 Jan 2020
- [Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.](https://agentprime.io/advisories/CVE-2020-1600.md)
  `CVE-2020-1600` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2020 · Tags: Denial of service
- [Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM](https://agentprime.io/advisories/CVE-2019-0075.md)
  `CVE-2019-0075` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019
- [Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.](https://agentprime.io/advisories/CVE-2019-0074.md)
  `CVE-2019-0074` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2019 · Tags: Path traversal
- [Junos OS: PKI key pairs are exported with insecure file permissions](https://agentprime.io/advisories/CVE-2019-0073.md)
  `CVE-2019-0073` · CVE record: Juniper Networks Junos OS · CVSS 6.6 Medium · Not analysed yet · Published 9 Oct 2019 · Tags: Broken access control
- [Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS](https://agentprime.io/advisories/CVE-2019-0071.md)
  `CVE-2019-0071` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2019 · Tags: Weak cryptography or TLS
- [Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.](https://agentprime.io/advisories/CVE-2019-0070.md)
  `CVE-2019-0070` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2019
- [Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text](https://agentprime.io/advisories/CVE-2019-0069.md)
  `CVE-2019-0069` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 9 Oct 2019
- [Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets](https://agentprime.io/advisories/CVE-2019-0068.md)
  `CVE-2019-0068` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-754
- [Junos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devices configured with Multi-Chassis Link Aggregation Group (MC-LAG)](https://agentprime.io/advisories/CVE-2019-0067.md)
  `CVE-2019-0067` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2019
- [Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core](https://agentprime.io/advisories/CVE-2019-0066.md)
  `CVE-2019-0066` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-394
- [Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC](https://agentprime.io/advisories/CVE-2019-0065.md)
  `CVE-2019-0065` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2019
- [Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet](https://agentprime.io/advisories/CVE-2019-0064.md)
  `CVE-2019-0064` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019
- [Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message](https://agentprime.io/advisories/CVE-2019-0063.md)
  `CVE-2019-0063` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2019
- [Junos OS: Session fixation vulnerability in J-Web](https://agentprime.io/advisories/CVE-2019-0062.md)
  `CVE-2019-0062` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 · Tags: Authentication bypass
- [Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation](https://agentprime.io/advisories/CVE-2019-0061.md)
  `CVE-2019-0061` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-657
- [Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets](https://agentprime.io/advisories/CVE-2019-0060.md)
  `CVE-2019-0060` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-755
- [Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.](https://agentprime.io/advisories/CVE-2019-0059.md)
  `CVE-2019-0059` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 · Tags: Denial of service
- [Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.](https://agentprime.io/advisories/CVE-2019-0058.md)
  `CVE-2019-0058` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2019
- [NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.](https://agentprime.io/advisories/CVE-2019-0057.md)
  `CVE-2019-0057` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2019
- [Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.](https://agentprime.io/advisories/CVE-2019-0056.md)
  `CVE-2019-0056` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-410
- [Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.](https://agentprime.io/advisories/CVE-2019-0055.md)
  `CVE-2019-0055` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-130
- [Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.](https://agentprime.io/advisories/CVE-2019-0054.md)
  `CVE-2019-0054` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 9 Oct 2019 · Tags: Weak cryptography or TLS, CWE-300
- [SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.](https://agentprime.io/advisories/CVE-2019-0051.md)
  `CVE-2019-0051` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2019 · Tags: CWE-755
- [Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.](https://agentprime.io/advisories/CVE-2019-0050.md)
  `CVE-2019-0050` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019
- [Junos OS: Persistent XSS vulnerability in J-Web](https://agentprime.io/advisories/CVE-2019-0047.md)
  `CVE-2019-0047` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2019 · Tags: Cross-site scripting (XSS)
- [Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow](https://agentprime.io/advisories/CVE-2019-0053.md)
  `CVE-2019-0053` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2019 · Tags: Memory corruption
- [SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets](https://agentprime.io/advisories/CVE-2019-0052.md)
  `CVE-2019-0052` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2019 · Tags: Denial of service
- [Junos OS: RPD process crashes when BGP peer restarts](https://agentprime.io/advisories/CVE-2019-0049.md)
  `CVE-2019-0049` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2019 · Tags: Denial of service
- [EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail](https://agentprime.io/advisories/CVE-2019-0048.md)
  `CVE-2019-0048` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 11 Jul 2019 · Tags: Information disclosure
- [Junos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.](https://agentprime.io/advisories/CVE-2019-0046.md)
  `CVE-2019-0046` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 11 Jul 2019 · Tags: Denial of service
- [Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface](https://agentprime.io/advisories/CVE-2019-0044.md)
  `CVE-2019-0044` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2019 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/technology/juniper-networks-junos-os.md>
Older: <https://agentprime.io/advisories/technology/juniper-networks-junos-os.md?cursor=WyIyMDE5LTA0LTEwVDIwOjEzOjUxLjY2NDAwMFoiLCJDVkUtMjAxOS0wMDQ0Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=juniper-networks-junos-os&cursor=WyIyMDIwLTA3LTE3VDE4OjQwOjQwLjQwNzAwMFoiLCJDVkUtMjAyMC0xNjQ0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/juniper-networks-junos-os/?cursor=WyIyMDIwLTA3LTE3VDE4OjQwOjQwLjQwNzAwMFoiLCJDVkUtMjAyMC0xNjQ0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.