Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2020-1648HIGHJunos OS and Junos OS Evolved: RPD crash when processing a specific BGP packetEPSS 1.3%CVE-2020-1671HIGHJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.EPSS 1.3%CVE-2019-0037HIGHJunos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit messageEPSS 1.3%CVE-2019-0065MEDIUMJunos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPCEPSS 1.3%CVE-2018-0009MEDIUMSRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.EPSS 1.3%CVE-2021-0207HIGHNFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.EPSS 1.3%CVE-2018-0035MEDIUMJunos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso imagesEPSS 1.3%CVE-2018-0004MEDIUMJunos OS: Kernel Denial of Service VulnerabilityEPSS 1.2%CVE-2020-1679HIGHJunos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.EPSS 1.2%CVE-2017-2310—A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain craftEPSS 1.2%CVE-2021-0231MEDIUMJunos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.EPSS 1.2%CVE-2021-31372HIGHJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.EPSS 1.2%CVE-2019-0028HIGHJunos OS: RPD process crashes due to specific BGP peer restarts condition.EPSS 1.2%CVE-2018-0013MEDIUMJunos Space: Local File Inclusion VulnerabilityEPSS 1.2%CVE-2018-0031MEDIUMJunos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rulesEPSS 1.2%CVE-2017-2308—An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to rEPSS 1.2%CVE-2022-22241HIGHJunos OS: Vulnerability in J-Web may allow deserialization without authenticationEPSS 1.2%CVE-2021-0205MEDIUMJunos OS: MX Series: Dynamic filter fails to match IPv6 prefixEPSS 1.2%CVE-2020-1600MEDIUMJunos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.EPSS 1.2%CVE-2017-2336CRITICALScreenOS: XSS vulnerability in ScreenOS FirewallEPSS 1.2%