Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2021-0297MEDIUMJunos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authenticationEPSS 0.7%CVE-2025-21598HIGHJunos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crashEPSS 0.7%CVE-2021-0217HIGHJunos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packetsEPSS 0.7%CVE-2021-0270HIGHJunos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deploymentEPSS 0.7%CVE-2018-0005HIGHSecurity Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.EPSS 0.7%CVE-2022-22229HIGHParagon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administrationEPSS 0.7%CVE-2021-31386MEDIUMJunos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.EPSS 0.7%CVE-2024-30382HIGHJunos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configuredEPSS 0.7%CVE-2021-0225MEDIUMJunos OS Evolved: Stateless IP firewall filter does not work as expectedEPSS 0.7%CVE-2021-0219MEDIUMJunos OS: Command injection vulnerability in 'request system software' CLI commandEPSS 0.7%CVE-2022-22164MEDIUMJunos OS Evolved: Telnet service may be enabled when it is expected to be disabled.EPSS 0.7%CVE-2022-22204MEDIUMJunos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP trafficEPSS 0.7%CVE-2022-22213MEDIUMJunos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP updateEPSS 0.7%CVE-2024-21614HIGHJunos OS and Junos OS Evolved: A specific query via DREND causes rpd crashEPSS 0.7%CVE-2024-30392HIGHJunos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occursEPSS 0.7%CVE-2026-33791HIGHJunos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as rootEPSS 0.7%CVE-2020-1667HIGHJunos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled.EPSS 0.7%CVE-2022-22181HIGHJunos OS: J-Web can be compromised through reflected XSS attacksEPSS 0.7%CVE-2022-22175HIGHJunos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processedEPSS 0.7%CVE-2020-1629MEDIUMJunos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.EPSS 0.7%