Vulnerabilidades en Juniper Networks

915 resultados
Análisis Vexday

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2025-60011MEDIUMJunos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flapEPSS 0.5%CVE-2023-22412HIGHJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processedEPSS 0.5%CVE-2021-0267HIGHJunos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.EPSS 0.5%CVE-2024-39549HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leakEPSS 0.5%CVE-2022-22208MEDIUMJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessionsEPSS 0.5%CVE-2022-22249MEDIUMJunos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainEPSS 0.5%CVE-2025-52988HIGHJunos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'EPSS 0.5%CVE-2026-57023HIGHJunos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crashEPSS 0.5%CVE-2026-33778HIGHJunos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashesEPSS 0.5%CVE-2026-33790HIGHJunos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.EPSS 0.5%CVE-2026-57026HIGHJunos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crashEPSS 0.5%CVE-2016-4922HIGHJunos: Privilege escalation vulnerabilities in Junos CLIEPSS 0.5%CVE-2024-39515HIGHJunos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crashEPSS 0.5%CVE-2025-52980HIGHJunos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE messageEPSS 0.5%CVE-2024-30381HIGHParagon Active Assurance: probe_serviced exposes internal objects to local usersEPSS 0.5%CVE-2020-1651MEDIUMJunos OS: MX Series: PFE on the line card may crash due to memory leak.EPSS 0.5%CVE-2024-21601MEDIUMJunos OS: SRX Series: Due to an error in processing TCP events flowd will crashEPSS 0.5%CVE-2018-0008MEDIUMJunos OS: commit script may allow unauthenticated root login upon rebootEPSS 0.5%CVE-2021-0214MEDIUMJunos OS: Denial of Service in ppmd upon receipt of malformed packetEPSS 0.5%CVE-2019-0032MEDIUMJunos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.EPSS 0.4%