Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2021-0209MEDIUMJunos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.EPSS 0.4%CVE-2024-30391MEDIUMJunos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performedEPSS 0.4%CVE-2022-22237MEDIUMJunos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locallyEPSS 0.4%CVE-2024-39531HIGHJunos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocolsEPSS 0.4%CVE-2025-52948HIGHJunos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabledEPSS 0.4%CVE-2017-10603HIGHJunos OS: Local XML Injection through CLI command can lead to privilege escalationEPSS 0.4%CVE-2024-39562HIGHJunos OS Evolved: A high rate of SSH connections causes a Denial of ServiceEPSS 0.4%CVE-2024-39525HIGHJunos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crashEPSS 0.4%CVE-2024-21589HIGHParagon Active Assurance Control Center: Information disclosure vulnerabilityEPSS 0.4%CVE-2024-39516HIGHJunos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crashEPSS 0.4%CVE-2017-10602HIGHJunos OS: buffer overflow vulnerability in Junos CLIEPSS 0.4%CVE-2020-1664HIGHJunos OS: Buffer overflow vulnerability in device control daemonEPSS 0.4%CVE-2020-1677HIGHJuniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.EPSS 0.4%CVE-2024-39518HIGHJunos OS: MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry InterfaceEPSS 0.4%CVE-2021-0272MEDIUMJunos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.EPSS 0.4%CVE-2025-60004HIGHJunos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crashEPSS 0.4%CVE-2021-31362MEDIUMJunos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoSEPSS 0.4%CVE-2021-31370MEDIUMJunos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is receivedEPSS 0.4%CVE-2021-31366MEDIUMJunos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoSEPSS 0.4%CVE-2026-57032HIGHJunos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crashEPSS 0.4%