Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2018-0025MEDIUMJunos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User AuthenticationEPSS 1.4%CVE-2020-1626HIGHJunos OS Evolved: Denial of Service vulnerability in processing high rate of specific packetsEPSS 1.4%CVE-2019-0066HIGHJunos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to coreEPSS 1.4%CVE-2020-1614CRITICALNFX250 Series: Hardcoded credentials in the vSRX VNF instance.EPSS 1.4%CVE-2019-0055HIGHJunos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.EPSS 1.3%CVE-2019-0060HIGHJunos OS: SRX Series: flowd process crash due to processing of specific transit IP packetsEPSS 1.3%CVE-2024-39563MEDIUMJunos Space: Remote Command Execution (RCE) vulnerability in web applicationEPSS 1.3%CVE-2018-0044CRITICALNFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OSEPSS 1.3%CVE-2018-0020HIGHJunos OS: rpd daemon cores due to malformed BGP UPDATE packetEPSS 1.3%CVE-2021-31379HIGHJunos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.EPSS 1.3%CVE-2019-0043HIGHJunos OS: RPD process crashes upon receipt of a specific SNMP packetEPSS 1.3%CVE-2020-1608HIGHJunos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of ServiceEPSS 1.3%CVE-2019-0059HIGHJunos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.EPSS 1.3%CVE-2020-1613HIGHJunos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.EPSS 1.3%CVE-2020-1638HIGHJunos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.EPSS 1.3%CVE-2019-0056HIGHJunos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.EPSS 1.3%CVE-2020-1627HIGHJunos OS: vMX and MX150: Denial of Service vulnerability in packet processingEPSS 1.3%CVE-2021-0211CRITICALJunos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.EPSS 1.3%CVE-2021-0227HIGHJunos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packetsEPSS 1.3%CVE-2020-1680MEDIUMJunos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.EPSS 1.3%