Vulnerabilidades em Juniper Networks

1.086 resultados
Análise Vexday

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2024-39546HIGHJunos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalationEPSS 0.2%CVE-2022-22233MEDIUMJunos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashEPSS 0.2%CVE-2026-102080MEDIUMJunos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchoverEPSS 0.2%CVE-2023-22409MEDIUMJunos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will rebootEPSS 0.2%CVE-2026-33780HIGHJunos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2aldEPSS 0.2%CVE-2025-60010MEDIUMJunos OS and Junos OS Evolved: Device allows login for user with expired passwordEPSS 0.2%CVE-2026-33774MEDIUMJunos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effectEPSS 0.2%CVE-2024-30378MEDIUMJunos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commandsEPSS 0.2%CVE-2023-22398MEDIUMJunos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPsEPSS 0.2%CVE-2023-44187MEDIUMJunos OS Evolved: 'file copy' CLI command can disclose password to shell usersEPSS 0.2%CVE-2026-103400MEDIUMSession Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanupEPSS 0.2%CVE-2026-21901MEDIUMJunos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crashEPSS 0.2%CVE-2025-59962MEDIUMJunos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crashEPSS 0.2%CVE-2023-44194HIGHJunos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privilegesEPSS 0.2%CVE-2023-44193MEDIUMJunos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is runEPSS 0.2%CVE-2026-33797HIGHJunos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP resetEPSS 0.2%CVE-2026-103411HIGHSession Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsingEPSS 0.2%CVE-2021-0298MEDIUMJunos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditionsEPSS 0.2%CVE-2023-44176MEDIUMJunos OS : Stack overflow vulnerability in CLI command processingEPSS 0.2%CVE-2023-44177MEDIUMJunos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processingEPSS 0.2%