Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2023-28961MEDIUMJunos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is usedEPSS 0.4%CVE-2024-39564HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crashEPSS 0.4%CVE-2026-21917HIGHJunos OS: SRX Series: Specifically malformed SSL packet causes FPC crashEPSS 0.4%CVE-2025-21601HIGHJunos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the deviceEPSS 0.4%CVE-2025-30660HIGHJunos OS: MX Series: Decapsulation of specific GRE packets leads to PFE resetEPSS 0.4%CVE-2025-30649HIGHJunos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.EPSS 0.4%CVE-2026-57024MEDIUMJunos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuouslyEPSS 0.4%CVE-2025-30658HIGHJunos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stopEPSS 0.4%CVE-2025-30645HIGHJunos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crashEPSS 0.4%CVE-2025-60003HIGHJunos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crashEPSS 0.4%CVE-2025-30659HIGHJunos OS: SRX Series: A device configured for vector routing crashes when receiving malformed trafficEPSS 0.4%CVE-2025-21594HIGHJunos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port blockEPSS 0.4%CVE-2026-21905HIGHJunos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crashEPSS 0.4%CVE-2025-30656HIGHJunos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crashEPSS 0.4%CVE-2025-30651HIGHJunos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crashEPSS 0.4%CVE-2026-21918HIGHJunos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashesEPSS 0.4%CVE-2025-59975HIGHJunos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoSEPSS 0.4%CVE-2026-21913HIGHJunos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restartEPSS 0.4%CVE-2020-1678MEDIUMJunos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.EPSS 0.4%CVE-2025-52984HIGHJunos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashesEPSS 0.4%