Browse CVEs

HIGH 7.5 CVE-2021-0282 On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemo… Junos Mitigation only Fix from $1,9502021-07-15 MEDIUM 5.5 CVE-2021-0279 Juniper Networks Contrail Cloud (CC) releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging serv… Contrail Cloud 13.6+ Fix from $1,6002021-07-15 HIGH 8.8 CVE-2021-0275 A Cross-site Scripting (XSS) vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining … Junos Mitigation only Fix from $1,9502021-04-22 MEDIUM 6.5 CVE-2021-0271 A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected at… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 6.5 CVE-2021-0272 A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators (FPCs) on Juniper Networks Ju… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 5.9 CVE-2021-0270 On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine (PFE) micr… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 5.3 CVE-2021-0273 An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Ser… Junos Mitigation only Fix from $1,6002021-04-22 CRITICAL 10.0 CVE-2021-0248 This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an … Junos 19.1+ Fix from $2,3002021-04-22 CRITICAL 9.8 CVE-2021-0249 On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS… Junos Mitigation only Fix from $2,3002021-04-22 CRITICAL 9.8 CVE-2021-0254 A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send spec… Junos Mitigation only Fix from $2,3002021-04-22 CRITICAL 9.8 CVE-2021-0266 The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any inst… Junos Mitigation only Fix from $2,3002021-04-22 CRITICAL 9.3 CVE-2021-0268 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buff… Junos Mitigation only Fix from $2,3002021-04-22 HIGH 8.8 CVE-2021-0269 The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a number of different malicious a… Junos Mitigation only Fix from $1,9502021-04-22 HIGH 8.6 CVE-2021-0251 A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery (CPCD) services daemon (cpcd) of Juniper Networks Junos OS on MX Seri… Junos Mitigation only Fix from $1,9502021-04-22 HIGH 8.1 CVE-2021-0265 An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on… Appformix 3.1.22 / 3.2.14+ Fix from $1,9502021-04-22 HIGH 7.8 CVE-2021-0245 A Use of Hard-coded Credentials vulnerability in Juniper Networks Junos OS on Junos Fusion satellite devices allows an attacker who is local to the d… Junos Mitigation only Fix from $1,9502021-04-22 HIGH 7.8 CVE-2021-0252 NFX Series devices using Juniper Networks Junos OS are susceptible to a local code execution vulnerability thereby allowing an attacker to elevate th… Junos No fix yet Fix from $1,9502021-04-22 HIGH 7.8 CVE-2021-0253 NFX Series devices using Juniper Networks Junos OS are susceptible to a local command execution vulnerability thereby allowing an attacker to elevate… Junos No fix yet Fix from $1,9502021-04-22 HIGH 7.8 CVE-2021-0255 A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to … Junos Mitigation only Fix from $1,9502021-04-22 HIGH 7.5 CVE-2021-0250 In segment routing traffic engineering (SRTE) environments where the BGP Monitoring Protocol (BMP) feature is enable, a vulnerability in the Routing … Junos Mitigation only Fix from $1,9502021-04-22 HIGH 7.5 CVE-2021-0261 A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redire… Junos Mitigation only Fix from $1,9502021-04-22 HIGH 7.5 CVE-2021-0264 A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC… Junos Mitigation only Fix from $1,9502021-04-22 HIGH 7.4 CVE-2021-0244 A signal handler race condition exists in the Layer 2 Address Learning Daemon (L2ALD) of Juniper Networks Junos OS due to the absence of a specific p… Junos Mitigation only Fix from $1,9502021-04-22 HIGH 7.4 CVE-2021-0259 Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instab… Junos Mitigation only Fix from $1,9502021-04-22 HIGH 7.3 CVE-2021-0246 On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect de… Junos Mitigation only Fix from $1,9502021-04-22 HIGH 7.3 CVE-2021-0260 An improper authorization vulnerability in the Simple Network Management Protocol daemon (snmpd) service of Juniper Networks Junos OS leads an unauth… Junos Mitigation only Fix from $1,9502021-04-22 MEDIUM 6.5 CVE-2021-0241 On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol … Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 6.5 CVE-2021-0242 A vulnerability due to the improper handling of direct memory access (DMA) buffers on EX4300 switches on Juniper Networks Junos OS allows an attacker… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 6.5 CVE-2021-0257 On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs (Modular Port Concentrators) where Integrated Routing and Bridging (IR… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 6.5 CVE-2021-0262 Through routine static code analysis of the Juniper Networks Junos OS software codebase, the Secure Development Life Cycle team identified a Use Afte… Junos Mitigation only Fix from $1,6002021-04-22