Vulnerabilidades en Juniper Networks

915 resultados
Análisis Vexday

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2021-0240HIGHJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.EPSS 0.4%CVE-2023-44195MEDIUMJunos OS Evolved: Packets which are not destined to the router can reach the REEPSS 0.4%CVE-2021-31367MEDIUMJunos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crashEPSS 0.4%CVE-2021-31365MEDIUMJunos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 framesEPSS 0.4%CVE-2019-0070HIGHJunos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.EPSS 0.4%CVE-2024-47509HIGHJunos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3EPSS 0.4%CVE-2024-47505HIGHJunos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1EPSS 0.4%CVE-2022-22168MEDIUMJunos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC rebootEPSS 0.4%CVE-2024-47508HIGHJunos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2EPSS 0.4%CVE-2026-33771CRITICALCTP OS: Configuring password requirements does not work which permits the use of weak passwordsEPSS 0.4%CVE-2022-22196MEDIUMJunos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been receivedEPSS 0.4%CVE-2023-28971HIGHParagon Active Assurance: Enabling the timescaledb enables IP forwardingEPSS 0.4%CVE-2021-0223HIGHJunos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binariesEPSS 0.4%CVE-2016-1261HIGHJunos: vulnerabilities in J-Web (CVE-2016-1261)EPSS 0.4%CVE-2021-0259HIGHJunos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenarioEPSS 0.4%CVE-2020-1641MEDIUMJunos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.EPSS 0.4%CVE-2026-57030HIGHJunos OS: SRX Series: Flow sessions are not getting cleared leading to a DoSEPSS 0.4%CVE-2021-0224MEDIUMJunos OS: ANCPD core when hitting maximum-discovery-table-entries limitEPSS 0.4%CVE-2021-0292MEDIUMJunos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)EPSS 0.4%CVE-2021-0288MEDIUMJunos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCsEPSS 0.4%