Browse CVEs

HIGH 7.5 CVE-2017-2348 The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CP… Junos Mitigation only Fix from $1,9502017-07-17 MEDIUM 5.9 CVE-2017-2346 An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway (ALG). Repeated crashes of th… Junos Mitigation only Fix from $1,6002017-07-17 MEDIUM 5.4 CVE-2017-2337 A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user … Screenos Mitigation only Fix from $1,6002017-07-17 MEDIUM 5.4 CVE-2017-2338 A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user … Screenos Mitigation only Fix from $1,6002017-07-17 MEDIUM 5.4 CVE-2017-2339 A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user … Screenos Mitigation only Fix from $1,6002017-07-17 HIGH 7.5 CVE-2017-2314 Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart. By continuously sending specially c… Junos Mitigation only Fix from $1,9502017-07-17 MEDIUM 5.4 CVE-2017-2335 A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user … Screenos Mitigation only Fix from $1,6002017-07-17 MEDIUM 5.4 CVE-2017-2336 A reflected cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a networ… Screenos Mitigation only Fix from $1,6002017-07-17 CRITICAL 9.8 CVE-2017-10601 A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password… Junos Mitigation only Fix from $2,3002017-07-17 HIGH 7.8 CVE-2017-10602 A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute co… Junos Mitigation only Fix from $1,9502017-07-17 HIGH 7.8 CVE-2017-10603 An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root us… Junos Mitigation only Fix from $1,9502017-07-17 HIGH 7.5 CVE-2017-10605 On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halti… Junos Mitigation only Fix from $1,9502017-07-17 MEDIUM 5.3 CVE-2017-10604 When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an… Junos Mitigation only Fix from $1,6002017-07-17 HIGH 7.5 CVE-2017-2301 On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 prior to 12.3R12-S2 or 12.3R1… Junos Mitigation only Fix from $1,9502017-05-30 HIGH 7.5 CVE-2017-2302 On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3… Junos Mitigation only Fix from $1,9502017-05-30 HIGH 7.5 CVE-2017-2303 On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48… Junos Mitigation only Fix from $1,9502017-05-30 HIGH 7.5 CVE-2017-2304 Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X5… Junos Mitigation only Fix from $1,9502017-05-30 HIGH 7.5 CVE-2017-2313 Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing … Junos Mitigation only Fix from $1,9502017-04-24 HIGH 7.5 CVE-2017-2315 On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may a… Junos Mitigation only Fix from $1,9502017-04-24 MEDIUM 6.5 CVE-2017-2312 On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE (Routing Engine) will c… Junos Mitigation only Fix from $1,6002017-04-24 MEDIUM 5.3 CVE-2017-2340 On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DH… Junos Mitigation only Fix from $1,6002017-04-24 MEDIUM 5.9 CVE-2016-1276 Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series … Junos Mitigation only Fix from $1,6002016-08-05 HIGH 7.5 CVE-2016-1274 Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate o… Junos Mitigation only Fix from $1,9502016-04-15 HIGH 7.5 CVE-2016-1268 The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a cra… Screenos Mitigation only Fix from $1,9502016-04-15 MEDIUM 5.3 CVE-2016-1260 Juniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300 series switches allow remote attackers to cause a d… Junos Mitigation only Fix from $1,6002016-01-15 MEDIUM 5.3 CVE-2016-1258 Embedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R1… Junos Mitigation only Fix from $1,6002016-01-15 MEDIUM 5.9 CVE-2016-1257 The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1… Junos Mitigation only Fix from $1,6002016-01-15 MEDIUM 5.3 CVE-2016-1256 Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 be… Junos Mitigation only Fix from $1,6002016-01-15 MEDIUM 5.0 CVE-2015-7756 The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.… Screenos Mitigation only Fix from $1,6002015-12-19 CRITICAL 9.8 CVE-2015-7755 KEVEPSS 61% Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15… Screenos Mitigation only Fix from $2,3002015-12-19