Vulnerabilidades em Juniper Networks

1.086 resultados
Análise Vexday

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2024-21615MEDIUMJunos OS and Junos OS Evolved: A low-privileged user can access confidential informationEPSS 0.2%CVE-2023-44201MEDIUMJunos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user. EPSS 0.2%CVE-2026-101934MEDIUMJunos OS and Junos OS Evolved: An attacker causes Denial of Service in eventdEPSS 0.2%CVE-2025-30655MEDIUMJunos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabledEPSS 0.1%CVE-2024-39511MEDIUMJunos OS: The 802.1X Authentication Daemon crashes on running a specific commandEPSS 0.1%CVE-2023-28973HIGHJunos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions EPSS 0.1%CVE-2026-101927HIGHJunos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalationEPSS 0.1%CVE-2025-60007MEDIUMJunos OS: A specifically crafted 'show chassis' command causes chassisd to crashEPSS 0.1%CVE-2025-59959MEDIUMJunos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crashEPSS 0.1%CVE-2024-39513MEDIUMJunos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT managerEPSS 0.1%CVE-2026-33785MEDIUMJunos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenarioEPSS 0.1%CVE-2026-57025MEDIUMJunos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crashEPSS 0.1%CVE-2025-30650HIGHJunos OS: Privileged local user can gain access to a Linux-based FPC as rootEPSS 0.1%CVE-2024-30406MEDIUMJunos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentialsEPSS 0.1%CVE-2025-52989MEDIUMJunos OS and Junos OS Evolved: Annotate configuration command can be used to change the configurationEPSS 0.1%CVE-2026-21916HIGHJunos OS: A low privileged user can escalate their privileges so that they can login as rootEPSS 0.1%CVE-2025-59961MEDIUMJunos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writableEPSS 0.1%CVE-2025-52986MEDIUMJunos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaksEPSS 0.1%CVE-2026-33779HIGHJunos OS: SRX Series: Insufficient certificate verification for device to SD cloud communicationEPSS 0.1%CVE-2026-33802MEDIUMJunos OS: EX Series: Unauthorized users can execute service-impacting CLI commandEPSS 0.1%