Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2020-1615CRITICALJunos OS: vMX: Default credentials supplied in vMX configurationEPSS 1.8%CVE-2018-0026MEDIUMJunos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgradeEPSS 1.8%CVE-2019-0007CRITICALJunos OS: vMX series: Predictable IP ID sequence numbers vulnerabilityEPSS 1.7%CVE-2021-31349CRITICALSession Smart Router: Authentication Bypass VulnerabilityEPSS 1.7%CVE-2025-21590MEDIUMJunos OS: An local attacker with shell access can execute arbitrary codeEPSS 1.7%KEVCVE-2017-10614MEDIUMJunos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetdEPSS 1.7%CVE-2019-0031HIGHJunos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.EPSS 1.7%CVE-2019-0013MEDIUMJunos OS: RPD crash upon receipt of malformed PIM packetEPSS 1.7%CVE-2019-0014HIGHJunos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packetEPSS 1.7%CVE-2018-0032HIGHJunos OS: RPD crash when receiving a crafted BGP UPDATEEPSS 1.7%CVE-2019-0012HIGHJunos OS: rpd crash on VPLS PE upon receipt of specific BGP messageEPSS 1.7%CVE-2020-1611MEDIUMJunos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.EPSS 1.7%CVE-2018-0046HIGHJunos Space: Reflected Cross-site Scripting vulnerability in OpenNMSEPSS 1.6%CVE-2018-0051HIGHJunos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALGEPSS 1.6%CVE-2020-1653HIGHJunos OS: Kernel crash (vmcore) or FPC crash due to mbuf leakEPSS 1.6%CVE-2017-2306—On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space admiEPSS 1.6%CVE-2017-10605HIGHJunos: SRX Series denial of service vulnerability in flowd due to crafted DHCP packetEPSS 1.6%CVE-2019-0033HIGHSRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.EPSS 1.6%CVE-2019-0020CRITICALJuniper ATP: Hard coded credentials used in Web CollectorEPSS 1.6%CVE-2020-1617HIGHJunos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.EPSS 1.6%