Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2021-0206HIGHJunos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.EPSS 1.3%CVE-2019-0068MEDIUMJunos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packetsEPSS 1.3%CVE-2019-0075HIGHJunos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIMEPSS 1.3%CVE-2017-2311—On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can eEPSS 1.3%CVE-2017-10616MEDIUMContrail: hard coded credentialsEPSS 1.3%CVE-2017-2314HIGHJunos: RPD crash due to malformed BGP OPEN messageEPSS 1.3%CVE-2017-10619HIGHJunos: SRX cluster denial of service vulnerability in flowd due to multicast packetsEPSS 1.3%CVE-2017-2323—A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malEPSS 1.3%CVE-2017-2348HIGHJunos OS: jdhcpd daemon crash due to invalid IPv6 UDP packetsEPSS 1.3%CVE-2020-1628MEDIUMJunos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfacesEPSS 1.3%CVE-2017-10612HIGHJunos Space: Persistent Cross site scripting in Junos SpaceEPSS 1.3%CVE-2020-1662HIGHJunos OS and Junos OS Evolved: RPD crash due to BGP session flapping.EPSS 1.3%CVE-2020-1657HIGHJunos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.EPSS 1.3%CVE-2019-0039MEDIUMJunos OS: Login credentials are vulnerable to brute force attacks through the REST APIEPSS 1.3%CVE-2020-1634HIGHJunos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.EPSS 1.3%CVE-2019-0063MEDIUMJunos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response messageEPSS 1.3%CVE-2019-0064HIGHJunos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packetEPSS 1.3%CVE-2019-0050HIGHJunos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.EPSS 1.3%CVE-2020-1665MEDIUMJunos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.EPSS 1.3%CVE-2020-1648HIGHJunos OS and Junos OS Evolved: RPD crash when processing a specific BGP packetEPSS 1.3%