Browse CVEs

HIGH 7.5 CVE-2020-1650 On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or… Junos Mitigation only Fix from $1,9502020-07-17 HIGH 7.5 CVE-2020-1653 On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which can lead to Flexible PIC Conc… Junos Mitigation only Fix from $1,9502020-07-17 MEDIUM 6.5 CVE-2020-1651 On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE)… Junos Mitigation only Fix from $1,6002020-07-17 HIGH 8.3 CVE-2020-1645 When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of pac… Junos Mitigation only Fix from $1,9502020-07-17 HIGH 7.5 CVE-2020-1640 An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (routing protocols process) daemon… Junos Mitigation only Fix from $1,9502020-07-17 HIGH 7.5 CVE-2020-1644 On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented i… Junos Mitigation only Fix from $1,9502020-07-17 MEDIUM 6.5 CVE-2020-1641 A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Serv… Junos Mitigation only Fix from $1,6002020-07-17 MEDIUM 5.5 CVE-2020-1643 Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause… Junos Mitigation only Fix from $1,6002020-07-17 CRITICAL 9.8 CVE-2020-1631 KEV A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redire… Junos Mitigation only Fix from $2,3002020-05-04 HIGH 8.6 CVE-2020-1632 In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an i… Junos Mitigation only Fix from $1,9502020-04-15 MEDIUM 6.5 CVE-2020-1633 Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configured as a Br… Junos Mitigation only Fix from $1,6002020-04-09 HIGH 7.5 CVE-2020-1627 A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service (DoS) by sending specific pa… Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1634 On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine mu… Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1638 The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packe… Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1639 When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packet to a target device, it may improp… Junos Mitigation only Fix from $1,9502020-04-08 MEDIUM 6.5 CVE-2020-1637 A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are … Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 5.9 CVE-2020-1629 A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while pro… Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 5.5 CVE-2020-1630 A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual Routing Engines (RE), Virtual Chassis (VC) or high-ava… Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 5.3 CVE-2020-1628 Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing t… Junos Mitigation only Fix from $1,6002020-04-08 CRITICAL 9.8 CVE-2020-1615 The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these … Junos Mitigation only Fix from $2,3002020-04-08 HIGH 7.5 CVE-2020-1613 A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receivin… Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1617 This issue occurs on Juniper Networks Junos OS devices which do not support Advanced Forwarding Interface (AFI) / Advanced Forwarding Toolkit (AFT). … Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1626 A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific pack… Junos Os Evolved Mitigation only Fix from $1,9502020-04-08 MEDIUM 6.8 CVE-2020-1618 On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without… Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 6.7 CVE-2020-1619 A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Next-Generation Routing Engine … Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 6.5 CVE-2020-1625 The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated Routing and Bridging (IRB) is … Junos No fix yet Fix from $1,6002020-04-08 MEDIUM 6.5 CVE-2015-3006 On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient… Junos Mitigation only Fix from $1,6002020-02-28 MEDIUM 6.5 CVE-2015-5361 Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data c… Junos Mitigation only Fix from $1,6002020-02-28 HIGH 7.1 CVE-2014-6447 Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (D… Junos Mitigation only Fix from $1,9502020-02-11 HIGH 7.8 CVE-2014-6448 Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary… Junos Mitigation only Fix from $1,9502020-01-15