Vulnerabilidades em Juniper Networks

1.086 resultados
Análise Vexday

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2023-44178MEDIUMJunos OS : Stack overflow vulnerability in CLI command processingEPSS 0.2%CVE-2026-33781HIGHJunos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passedEPSS 0.2%CVE-2025-30654MEDIUMJunos OS and Junos OS Evolved: A local, low privileged user can access sensitive informationEPSS 0.2%CVE-2024-21594MEDIUMJunos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crashEPSS 0.2%CVE-2023-28980MEDIUMJunos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issuedEPSS 0.2%CVE-2025-52954HIGHJunos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the systemEPSS 0.2%CVE-2023-28960HIGHJunos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containersEPSS 0.2%CVE-2022-22251HIGHcSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privilegesEPSS 0.2%CVE-2024-30384MEDIUMJunos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occurEPSS 0.2%CVE-2025-21592MEDIUMJunos OS: SRX Series: Low privileged user able to access highly sensitive information on file systemEPSS 0.2%CVE-2023-28966HIGHJunos OS Evolved: Local low-privileged user with shell access can execute CLI commands as rootEPSS 0.2%CVE-2026-33793HIGHJunos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the systemEPSS 0.2%CVE-2025-30652MEDIUMJunos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crashEPSS 0.2%CVE-2023-36836MEDIUMJunos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executedEPSS 0.2%CVE-2025-52963MEDIUMJunos OS: A low-privileged user can disable an interfaceEPSS 0.2%CVE-2026-102013MEDIUMJunos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is usedEPSS 0.2%CVE-2024-39532MEDIUMJunos OS and Junos OS Evolved: Confidential information in logs can be accessed by another userEPSS 0.2%CVE-2026-103393MEDIUMSession Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processingEPSS 0.2%CVE-2025-21596MEDIUMJunos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crashEPSS 0.2%CVE-2019-0072MEDIUMSBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.EPSS 0.2%