# Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update](https://agentprime.io/advisories/CVE-2021-31353.md)
  `CVE-2021-31353` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-755
- [Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset](https://agentprime.io/advisories/CVE-2021-31351.md)
  `CVE-2021-31351` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)](https://agentprime.io/advisories/CVE-2021-31350.md)
  `CVE-2021-31350` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2021 · Tags: Privilege escalation
- [Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet](https://agentprime.io/advisories/CVE-2021-0299.md)
  `CVE-2021-0299` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-755
- [Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)](https://agentprime.io/advisories/CVE-2021-0284.md)
  `CVE-2021-0284` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 17 Aug 2021 · Tags: Memory corruption
- [Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.](https://agentprime.io/advisories/CVE-2021-0295.md)
  `CVE-2021-0295` · CVE record: Juniper Networks Junos OS · CVSS 6.1 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-697
- [Junos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of Service](https://agentprime.io/advisories/CVE-2021-0294.md)
  `CVE-2021-0294` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-474
- [Junos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedly](https://agentprime.io/advisories/CVE-2021-0293.md)
  `CVE-2021-0293` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service](https://agentprime.io/advisories/CVE-2021-0291.md)
  `CVE-2021-0291` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: Information disclosure
- [Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames](https://agentprime.io/advisories/CVE-2021-0290.md)
  `CVE-2021-0290` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-755
- [Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted](https://agentprime.io/advisories/CVE-2021-0289.md)
  `CVE-2021-0289` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: Race condition
- [Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs](https://agentprime.io/advisories/CVE-2021-0288.md)
  `CVE-2021-0288` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network](https://agentprime.io/advisories/CVE-2021-0287.md)
  `CVE-2021-0287` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-754
- [Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic](https://agentprime.io/advisories/CVE-2021-0285.md)
  `CVE-2021-0285` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jul 2021 · Tags: Denial of service
- [Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)](https://agentprime.io/advisories/CVE-2021-0283.md)
  `CVE-2021-0283` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jul 2021 · Tags: Memory corruption
- [Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled](https://agentprime.io/advisories/CVE-2021-0282.md)
  `CVE-2021-0282` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI](https://agentprime.io/advisories/CVE-2021-0281.md)
  `CVE-2021-0281` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-754
- [Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine](https://agentprime.io/advisories/CVE-2021-0280.md)
  `CVE-2021-0280` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-665
- [Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.](https://agentprime.io/advisories/CVE-2021-0278.md)
  `CVE-2021-0278` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-20
- [Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd](https://agentprime.io/advisories/CVE-2021-0277.md)
  `CVE-2021-0277` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2021 · Tags: Memory corruption
- [Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.](https://agentprime.io/advisories/CVE-2021-0275.md)
  `CVE-2021-0275` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 22 Apr 2021 · Tags: Cross-site scripting (XSS)
- [Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.](https://agentprime.io/advisories/CVE-2021-0273.md)
  `CVE-2021-0273` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service, CWE-670
- [Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.](https://agentprime.io/advisories/CVE-2021-0272.md)
  `CVE-2021-0272` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service
- [Junos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attac…](https://agentprime.io/advisories/CVE-2021-0271.md)
  `CVE-2021-0271` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Memory corruption
- [Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment](https://agentprime.io/advisories/CVE-2021-0270.md)
  `CVE-2021-0270` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2021 · Tags: Race condition, Memory corruption
- [Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.](https://agentprime.io/advisories/CVE-2021-0269.md)
  `CVE-2021-0269` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-233
- [Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.](https://agentprime.io/advisories/CVE-2021-0268.md)
  `CVE-2021-0268` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 22 Apr 2021 · Tags: Cross-site scripting (XSS), Other injection, Memory corruption
- [Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.](https://agentprime.io/advisories/CVE-2021-0267.md)
  `CVE-2021-0267` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-20
- [cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.](https://agentprime.io/advisories/CVE-2021-0266.md)
  `CVE-2021-0266` · CVE record: Juniper Networks Junos OS · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2021 · Tags: Hard-coded credentials
- [Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured](https://agentprime.io/advisories/CVE-2021-0264.md)
  `CVE-2021-0264` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-703
- [Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled](https://agentprime.io/advisories/CVE-2021-0263.md)
  `CVE-2021-0263` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-19
- [Junos OS: QFX10002-60C: Use after free vulnerability found during static code analysis](https://agentprime.io/advisories/CVE-2021-0262.md)
  `CVE-2021-0262` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Memory corruption
- [Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests](https://agentprime.io/advisories/CVE-2021-0261.md)
  `CVE-2021-0261` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2021 · Tags: Memory corruption, Denial of service
- [Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.](https://agentprime.io/advisories/CVE-2021-0260.md)
  `CVE-2021-0260` · CVE record: Juniper Networks Junos OS · CVSS 7.3 High · Not analysed yet · Published 22 Apr 2021 · Tags: Broken access control, Information disclosure
- [Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario](https://agentprime.io/advisories/CVE-2021-0259.md)
  `CVE-2021-0259` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.4 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-755
- [Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface](https://agentprime.io/advisories/CVE-2021-0258.md)
  `CVE-2021-0258` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Race condition
- [Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface](https://agentprime.io/advisories/CVE-2021-0257.md)
  `CVE-2021-0257` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service
- [Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries](https://agentprime.io/advisories/CVE-2021-0256.md)
  `CVE-2021-0256` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Privilege escalation
- [Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries](https://agentprime.io/advisories/CVE-2021-0255.md)
  `CVE-2021-0255` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Privilege escalation
- [Junos OS: Remote code execution vulnerability in overlayd service](https://agentprime.io/advisories/CVE-2021-0254.md)
  `CVE-2021-0254` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2021 · Tags: Memory corruption
- [Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation](https://agentprime.io/advisories/CVE-2021-0253.md)
  `CVE-2021-0253` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 22 Apr 2021 · Tags: Command injection
- [Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation](https://agentprime.io/advisories/CVE-2021-0252.md)
  `CVE-2021-0252` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 22 Apr 2021 · Tags: Command injection
- [Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets](https://agentprime.io/advisories/CVE-2021-0251.md)
  `CVE-2021-0251` · CVE record: Juniper Networks Junos OS · CVSS 8.6 High · Not analysed yet · Published 22 Apr 2021 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD](https://agentprime.io/advisories/CVE-2021-0250.md)
  `CVE-2021-0250` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2021
- [Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.](https://agentprime.io/advisories/CVE-2021-0249.md)
  `CVE-2021-0249` · CVE record: Juniper Networks Junos OS · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2021 · Tags: Memory corruption
- [NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.](https://agentprime.io/advisories/CVE-2021-0248.md)
  `CVE-2021-0248` · CVE record: Juniper Networks Junos OS · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Apr 2021 · Tags: Hard-coded credentials
- [Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.](https://agentprime.io/advisories/CVE-2021-0247.md)
  `CVE-2021-0247` · CVE record: Juniper Networks Junos OS · CVSS 5.1 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Race condition
- [Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other t…](https://agentprime.io/advisories/CVE-2021-0246.md)
  `CVE-2021-0246` · CVE record: Juniper Networks Junos OS · CVSS 7.3 High · Not analysed yet · Published 22 Apr 2021 · Tags: Broken access control
- [Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.](https://agentprime.io/advisories/CVE-2021-0245.md)
  `CVE-2021-0245` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 22 Apr 2021 · Tags: Hard-coded credentials
- [Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition](https://agentprime.io/advisories/CVE-2021-0244.md)
  `CVE-2021-0244` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 22 Apr 2021
- [Junos OS: EX4300: Stateless firewall policer fails to discard traffic](https://agentprime.io/advisories/CVE-2021-0243.md)
  `CVE-2021-0243` · CVE record: Juniper Networks Junos OS · CVSS 4.7 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-241
- [Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured](https://agentprime.io/advisories/CVE-2021-0242.md)
  `CVE-2021-0242` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Memory corruption, CWE-241
- [Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart](https://agentprime.io/advisories/CVE-2021-0241.md)
  `CVE-2021-0241` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-703
- [Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.](https://agentprime.io/advisories/CVE-2021-0240.md)
  `CVE-2021-0240` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-703
- [Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space](https://agentprime.io/advisories/CVE-2021-0238.md)
  `CVE-2021-0238` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service
- [Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration](https://agentprime.io/advisories/CVE-2021-0237.md)
  `CVE-2021-0237` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021
- [Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.](https://agentprime.io/advisories/CVE-2021-0236.md)
  `CVE-2021-0236` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754
- [Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting…](https://agentprime.io/advisories/CVE-2021-0235.md)
  `CVE-2021-0235` · CVE record: Juniper Networks Junos OS · CVSS 7.3 High · Not analysed yet · Published 22 Apr 2021 · Tags: Broken access control
- [Junos OS: QFX5100-96S: DDoS protection does not work as expected.](https://agentprime.io/advisories/CVE-2021-0234.md)
  `CVE-2021-0234` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-665
- [Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.](https://agentprime.io/advisories/CVE-2021-0233.md)
  `CVE-2021-0233` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service, CWE-794

Newest: <https://agentprime.io/advisories/technology/juniper-networks-junos-os.md>
Older: <https://agentprime.io/advisories/technology/juniper-networks-junos-os.md?cursor=WyIyMDIxLTA0LTIyVDE5OjM3OjAxLjMyMTAwMFoiLCJDVkUtMjAyMS0wMjMzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=juniper-networks-junos-os&cursor=WyIyMDIxLTEwLTE5VDE4OjE2OjM2LjUwMjAwMFoiLCJDVkUtMjAyMS0zMTM1NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/juniper-networks-junos-os/?cursor=WyIyMDIxLTEwLTE5VDE4OjE2OjM2LjUwMjAwMFoiLCJDVkUtMjAyMS0zMTM1NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.