Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2022-22246HIGHJunos OS: PHP file inclusion vulnerability in J-WebEPSS 0.7%CVE-2022-22167HIGHJunos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policyEPSS 0.7%CVE-2018-0006MEDIUMJunos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejectsEPSS 0.7%CVE-2019-0046MEDIUMJunos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.EPSS 0.7%CVE-2022-22184HIGHJunos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1EPSS 0.7%CVE-2024-30394HIGHJunos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crashEPSS 0.7%CVE-2021-31364MEDIUMJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is receivedEPSS 0.7%CVE-2022-22157HIGHJunos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabledEPSS 0.7%CVE-2022-22245MEDIUMJunos OS: Path traversal vulnerability in J-WebEPSS 0.7%CVE-2024-47489MEDIUMJunos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the REEPSS 0.7%CVE-2022-22232HIGHSRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crashEPSS 0.7%CVE-2022-22211HIGHJunos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OIDEPSS 0.7%CVE-2022-22201HIGHSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetEPSS 0.7%CVE-2022-22231HIGHSRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashEPSS 0.7%CVE-2022-22228HIGHJunos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packetEPSS 0.7%CVE-2022-22236HIGHJunos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crashEPSS 0.7%CVE-2024-39534MEDIUMJunos OS Evolved: Connections to the network and broadcast address acceptedEPSS 0.7%CVE-2023-22416HIGHJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is receivedEPSS 0.7%CVE-2021-0277HIGHJunos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpdEPSS 0.7%CVE-2021-0208HIGHJunos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.EPSS 0.7%