Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2019-0029HIGHJuniper ATP: Splunk credentials are in logged in clear textEPSS 0.3%CVE-2022-22217MEDIUMJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLANEPSS 0.3%CVE-2019-0021HIGHJuniper ATP: secret CLI inputs are logged to /var/log/syslog in clear textEPSS 0.3%CVE-2024-39528MEDIUMJunos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crashEPSS 0.3%CVE-2024-47503HIGHJunos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crashEPSS 0.3%CVE-2024-47498HIGHJunos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effectEPSS 0.3%CVE-2024-39537MEDIUMJunos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the networkEPSS 0.3%CVE-2024-39543HIGHJunos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crashEPSS 0.3%CVE-2024-39538HIGHJunos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashesEPSS 0.3%CVE-2024-39541HIGHJunos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crashEPSS 0.3%CVE-2026-33790HIGHJunos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.EPSS 0.3%CVE-2025-52960HIGHJunos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crashEPSS 0.3%CVE-2019-0004HIGHJuniper ATP: API and device keys are logged in a world-readable permissions fileEPSS 0.3%CVE-2023-44188MEDIUMJunos OS: jkdsd crash due to multiple telemetry requestsEPSS 0.3%CVE-2020-1666MEDIUMJunos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnectionEPSS 0.3%CVE-2024-39535HIGHJunos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashesEPSS 0.3%CVE-2024-39550HIGHJunos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of ServiceEPSS 0.3%CVE-2026-21914HIGHJunos OS: SRX Series: A specifically malformed GTP message will cause an FPC crashEPSS 0.3%CVE-2024-21600MEDIUMJunos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge conditionEPSS 0.3%CVE-2020-1682MEDIUMJunos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI commandEPSS 0.3%