Browse CVEs

HIGH 8.8 CVE-2020-1602 When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.8 CVE-2020-1605 When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.8 CVE-2020-1609 When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.6 CVE-2020-1603 Specific IPv6 packets sent by clients processed by the Routing Engine (RE) are improperly handled. These IPv6 packets are designed to be blocked by t… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.1 CVE-2020-1606 A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable perm… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 7.5 CVE-2020-1608 Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge (BBE) service may trigger… Junos Mitigation only Fix from $1,9502020-01-15 MEDIUM 6.5 CVE-2020-1611 A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives mali… Junos Space Mitigation only Fix from $1,6002020-01-15 MEDIUM 6.1 CVE-2020-1607 Insufficient Cross-Site Scripting (XSS) protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target u… Junos Mitigation only Fix from $1,6002020-01-15 MEDIUM 5.3 CVE-2020-1604 On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certa… Junos Mitigation only Fix from $1,6002020-01-15 HIGH 7.5 CVE-2020-1601 Certain types of malformed Path Computation Element Protocol (PCEP) packets when received and processed by a Juniper Networks Junos OS device serving… Junos Mitigation only Fix from $1,9502020-01-15 MEDIUM 6.5 CVE-2020-1600 In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon… Junos Mitigation only Fix from $1,6002020-01-15 HIGH 7.8 CVE-2019-0071 Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in speci… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0075 A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and … Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.1 CVE-2019-0073 The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow ano… Junos Mitigation only Fix from $1,9502019-10-09 MEDIUM 5.5 CVE-2019-0072 An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to… Sbr Carrier Mitigation only Fix from $1,6002019-10-09 MEDIUM 5.5 CVE-2019-0074 A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engin… Junos Mitigation only Fix from $1,6002019-10-09 HIGH 8.8 CVE-2019-0062 A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administra… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-0061 The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an i… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0063 When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might crash wh… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0064 On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may crash when a specific TCP packet… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0065 On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuou… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0066 An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attacker to cau… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0068 The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending t… Junos Mitigation only Fix from $1,9502019-10-09 MEDIUM 6.5 CVE-2019-0067 Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart (vmcore). By continuously sending a special… Junos Mitigation only Fix from $1,6002019-10-09 MEDIUM 5.5 CVE-2019-0069 On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, … Junos Mitigation only Fix from $1,6002019-10-09 HIGH 8.8 CVE-2019-0047 A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrativ… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-0058 A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticate… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0050 Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes … Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0051 SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd d… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0055 A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the de… Junos Mitigation only Fix from $1,9502019-10-09