Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2025-59974CRITICALJunos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-52982HIGHJunos OS: MX Series: When specific SIP packets are processed the MS-MPC will crashEPSS 0.4%CVE-2018-0024HIGHJunos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become rootEPSS 0.4%CVE-2021-0243MEDIUMJunos OS: EX4300: Stateless firewall policer fails to discard trafficEPSS 0.4%CVE-2024-21597MEDIUMJunos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filtersEPSS 0.4%CVE-2021-0287MEDIUMJunos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the networkEPSS 0.4%CVE-2022-22179MEDIUMJunos OS: jdhcpd crashes upon receiving a specific DHCP packetEPSS 0.4%CVE-2024-47493HIGHJunos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crashEPSS 0.4%CVE-2022-22172MEDIUMJunos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoSEPSS 0.4%CVE-2022-22191MEDIUMJunos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP trafficEPSS 0.4%CVE-2022-22166MEDIUMJunos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is receivedEPSS 0.4%CVE-2022-22155MEDIUMJunos OS: ACX5448: FPC memory leak due to IPv6 neighbor flapsEPSS 0.4%CVE-2022-22176HIGHJunos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packetEPSS 0.4%CVE-2022-22163HIGHJunos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packetEPSS 0.4%CVE-2024-39526HIGHJunos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packetsEPSS 0.4%CVE-2026-33799MEDIUMJunos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crashEPSS 0.4%CVE-2024-39554HIGHJunos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crashEPSS 0.4%CVE-2023-28972MEDIUMJunos OS: NFX Series: 'set system ports console insecure' allows root password recoveryEPSS 0.4%CVE-2026-57054MEDIUMJunos OS: MX Series: Web filtering doesn't block specifically formatted URLsEPSS 0.4%CVE-2024-21590HIGHJunos OS Evolved: Packets which are not destined to the device can reach the REEPSS 0.4%