Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2023-28964HIGHJunos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crashEPSS 0.6%CVE-2023-28982HIGHJunos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occurEPSS 0.6%CVE-2021-0258MEDIUMJunos OS: Kernel panic upon receipt of specific TCPv6 packet on management interfaceEPSS 0.6%CVE-2018-0054MEDIUMQFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet framesEPSS 0.6%CVE-2023-0026HIGH2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attributeEPSS 0.6%CVE-2023-22413HIGHJunos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packetsEPSS 0.6%CVE-2023-22417HIGHJunos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crashEPSS 0.6%CVE-2022-22186HIGHJunos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discardedEPSS 0.6%CVE-2023-22403HIGHJunos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific trafficEPSS 0.6%CVE-2024-47499HIGHJunos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crashEPSS 0.6%CVE-2023-36835HIGHJunos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnelEPSS 0.6%CVE-2023-36832HIGHJunos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interfaceEPSS 0.6%CVE-2021-0222HIGHJunos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.EPSS 0.6%CVE-2024-47502HIGHJunos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoSEPSS 0.6%CVE-2019-0011MEDIUMJunos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)EPSS 0.6%CVE-2018-0063MEDIUMJunos OS: Nexthop index allocation failed: private index space exhausted after incoming ARP requests to management interfaceEPSS 0.6%CVE-2021-0244HIGHJunos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service conditionEPSS 0.6%CVE-2023-22399HIGHJunos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabledEPSS 0.6%CVE-2019-0024MEDIUMJuniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menuEPSS 0.6%CVE-2023-36831HIGHJunos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is appliedEPSS 0.6%