Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2021-0267HIGHJunos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.EPSS 0.5%CVE-2024-39549HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leakEPSS 0.5%CVE-2022-22208MEDIUMJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessionsEPSS 0.5%CVE-2022-22249MEDIUMJunos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainEPSS 0.5%CVE-2025-52988HIGHJunos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'EPSS 0.5%CVE-2026-57026HIGHJunos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crashEPSS 0.5%CVE-2026-57023HIGHJunos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crashEPSS 0.5%CVE-2016-4922HIGHJunos: Privilege escalation vulnerabilities in Junos CLIEPSS 0.5%CVE-2025-52980HIGHJunos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE messageEPSS 0.5%CVE-2024-39515HIGHJunos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crashEPSS 0.5%CVE-2024-30381HIGHParagon Active Assurance: probe_serviced exposes internal objects to local usersEPSS 0.5%CVE-2026-33784CRITICALJSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged accessEPSS 0.5%CVE-2020-1651MEDIUMJunos OS: MX Series: PFE on the line card may crash due to memory leak.EPSS 0.5%CVE-2024-21601MEDIUMJunos OS: SRX Series: Due to an error in processing TCP events flowd will crashEPSS 0.5%CVE-2021-0214MEDIUMJunos OS: Denial of Service in ppmd upon receipt of malformed packetEPSS 0.5%CVE-2018-0008MEDIUMJunos OS: commit script may allow unauthenticated root login upon rebootEPSS 0.5%CVE-2019-0032MEDIUMJunos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.EPSS 0.4%CVE-2025-52946HIGHJunos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crashEPSS 0.4%CVE-2022-22218HIGHJunos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollmentEPSS 0.4%CVE-2025-52981HIGHJunos OS: SRX Series: Sequence of specific PIM packets causes a flowd crashEPSS 0.4%