Advisories · Technology

Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-1643 CVE record

CVSS 5.5 Medium

Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured
- Juniper Networks Junos OS
- CWE-755
Not analysed yet 17 Jul 2020
CVE-2020-1641 CVE record

CVSS 6.5 Medium

Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.
- Juniper Networks Junos OS
- Race condition
Not analysed yet 17 Jul 2020
CVE-2020-1640 CVE record

CVSS 7.5 High

Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.
- Juniper Networks Junos OS
- CWE-1173
Not analysed yet 17 Jul 2020
CVE-2020-1631 CVE record

CVSS 8.8 HighCritical · KEVKEV

Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services
- Juniper Networks Junos OS
- Path traversal
Not analysed yet 4 May 2020
CVE-2020-1632 CVE record

CVSS 8.6 High

Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
Not analysed yet 15 Apr 2020
CVE-2020-1633 CVE record

CVSS 7.4 High

Junos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service
- Juniper Networks Junos OS
- CWE-20
Not analysed yet 9 Apr 2020
CVE-2020-1639 CVE record

CVSS 7.5 High

Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.
- Juniper Networks Junos OS
- CWE-703
Not analysed yet 8 Apr 2020
CVE-2020-1638 CVE record

CVSS 7.5 High

Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-467
Not analysed yet 8 Apr 2020
CVE-2020-1637 CVE record

CVSS 7.2 High

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability
- Juniper Networks Junos OS
- Authentication bypass
Not analysed yet 8 Apr 2020
CVE-2020-1634 CVE record

CVSS 7.5 High

Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 8 Apr 2020
CVE-2020-1630 CVE record

CVSS 5.0 Medium

Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.
- Juniper Networks Junos OS
- Race condition
- CWE-264
Not analysed yet 8 Apr 2020
CVE-2020-1629 CVE record

CVSS 5.9 Medium

Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.
- Juniper Networks Junos OS
- CWE-366
Not analysed yet 8 Apr 2020
CVE-2020-1628 CVE record

CVSS 5.3 Medium

Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces
- Juniper Networks Junos OS
- Information disclosure
Not analysed yet 8 Apr 2020
CVE-2020-1627 CVE record

CVSS 7.5 High

Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing
- Juniper Networks Junos OS
Not analysed yet 8 Apr 2020
CVE-2020-1625 CVE record

CVSS 6.5 Medium

Junos OS: Kernel memory leak in virtual-memory due to interface flaps
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 8 Apr 2020
CVE-2020-1619 CVE record

CVSS 6.0 Medium

Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.
- Juniper Networks Junos OS
- CWE-20
- CWE-264
Not analysed yet 8 Apr 2020
CVE-2020-1618 CVE record

CVSS 6.3 Medium

Junos OS: EX and QFX Series: Console port authentication bypass vulnerability
- Juniper Networks Junos OS
- Authentication bypass
Not analysed yet 8 Apr 2020
CVE-2020-1617 CVE record

CVSS 7.5 High

Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.
- Juniper Networks Junos OS
- CWE-665
Not analysed yet 8 Apr 2020
CVE-2020-1615 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos OS: vMX: Default credentials supplied in vMX configuration
- Juniper Networks Junos OS
- Hard-coded credentials
Not analysed yet 8 Apr 2020
CVE-2020-1613 CVE record

CVSS 8.6 High

Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.
- Juniper Networks Junos OS
- CWE-710
Not analysed yet 8 Apr 2020
CVE-2020-1609 CVE record

CVSS 8.8 High

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Command injection
- Memory corruption
Not analysed yet 15 Jan 2020
CVE-2020-1608 CVE record

CVSS 7.5 High

Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service
- Juniper Networks Junos OS
Not analysed yet 15 Jan 2020
CVE-2020-1607 CVE record

CVSS 7.5 High

Junos OS: Cross-Site Scripting (XSS) in J-Web
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
Not analysed yet 15 Jan 2020
CVE-2020-1606 CVE record

CVSS 5.4 Medium

Junos OS: Path traversal vulnerability in J-Web
- Juniper Networks Junos OS
- Path traversal
Not analysed yet 15 Jan 2020
CVE-2020-1605 CVE record

CVSS 8.8 High

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Command injection
- Memory corruption
Not analysed yet 15 Jan 2020
CVE-2020-1604 CVE record

CVSS 6.5 Medium

Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets
- Juniper Networks Junos OS
- Broken access control
Not analysed yet 15 Jan 2020
CVE-2020-1603 CVE record

CVSS 8.6 High

Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.
- Juniper Networks Junos OS
- CWE-710
Not analysed yet 15 Jan 2020
CVE-2020-1602 CVE record

CVSS 7.1 High

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 15 Jan 2020
CVE-2020-1601 CVE record

CVSS 5.3 Medium

Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.
- Juniper Networks Junos OS
Not analysed yet 15 Jan 2020
CVE-2020-1600 CVE record

CVSS 6.5 Medium

Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 15 Jan 2020
CVE-2019-0075 CVE record

CVSS 7.5 High

Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0074 CVE record

CVSS 5.5 Medium

Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.
- Juniper Networks Junos OS
- Path traversal
Not analysed yet 9 Oct 2019
CVE-2019-0073 CVE record

CVSS 6.6 Medium

Junos OS: PKI key pairs are exported with insecure file permissions
- Juniper Networks Junos OS
- Broken access control
Not analysed yet 9 Oct 2019
CVE-2019-0071 CVE record

CVSS 7.8 High

Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS
- Juniper Networks Junos OS
- Weak cryptography or TLS
Not analysed yet 9 Oct 2019
CVE-2019-0070 CVE record

CVSS 8.8 High

Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0069 CVE record

CVSS 5.9 Medium

Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0068 CVE record

CVSS 6.5 Medium

Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 9 Oct 2019
CVE-2019-0067 CVE record

CVSS 6.5 Medium

Junos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devices configured with Multi-Chassis Link Aggregation Group (MC-LAG)
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0066 CVE record

CVSS 7.5 High

Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core
- Juniper Networks Junos OS
- CWE-394
Not analysed yet 9 Oct 2019
CVE-2019-0065 CVE record

CVSS 5.3 Medium

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0064 CVE record

CVSS 7.5 High

Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0063 CVE record

CVSS 6.5 Medium

Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0062 CVE record

CVSS 7.5 High

Junos OS: Session fixation vulnerability in J-Web
- Juniper Networks Junos OS
- Authentication bypass
Not analysed yet 9 Oct 2019
CVE-2019-0061 CVE record

CVSS 7.8 High

Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation
- Juniper Networks Junos OS
- CWE-657
Not analysed yet 9 Oct 2019
CVE-2019-0060 CVE record

CVSS 7.5 High

Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets
- Juniper Networks Junos OS
- CWE-755
Not analysed yet 9 Oct 2019
CVE-2019-0059 CVE record

CVSS 7.5 High

Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 9 Oct 2019
CVE-2019-0058 CVE record

CVSS 7.8 High

Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0057 CVE record

CVSS 7.8 High

NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0056 CVE record

CVSS 7.5 High

Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.
- Juniper Networks Junos OS
- CWE-410
Not analysed yet 9 Oct 2019
CVE-2019-0055 CVE record

CVSS 7.5 High

Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.
- Juniper Networks Junos OS
- CWE-130
Not analysed yet 9 Oct 2019
CVE-2019-0054 CVE record

CVSS 6.8 Medium

Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.
- Juniper Networks Junos OS
- Weak cryptography or TLS
- CWE-300
Not analysed yet 9 Oct 2019
CVE-2019-0051 CVE record

CVSS 6.5 Medium

SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.
- Juniper Networks Junos OS
- CWE-755
Not analysed yet 9 Oct 2019
CVE-2019-0050 CVE record

CVSS 7.5 High

Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.
- Juniper Networks Junos OS
Not analysed yet 9 Oct 2019
CVE-2019-0047 CVE record

CVSS 8.8 High

Junos OS: Persistent XSS vulnerability in J-Web
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2019
CVE-2019-0053 CVE record

CVSS 7.8 High

Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 11 Jul 2019
CVE-2019-0052 CVE record

CVSS 7.5 High

SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 11 Jul 2019
CVE-2019-0049 CVE record

CVSS 7.5 High

Junos OS: RPD process crashes when BGP peer restarts
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 11 Jul 2019
CVE-2019-0048 CVE record

CVSS 5.8 Medium

EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail
- Juniper Networks Junos OS
- Information disclosure
Not analysed yet 11 Jul 2019
CVE-2019-0046 CVE record

CVSS 6.5 Medium

Junos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 11 Jul 2019
CVE-2019-0044 CVE record

CVSS 7.5 High

Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 10 Apr 2019