Browse CVEs

HIGH 7.5 CVE-2020-1634 On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine mu… Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1638 The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packe… Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1639 When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packet to a target device, it may improp… Junos Mitigation only Fix from $1,9502020-04-08 MEDIUM 6.5 CVE-2020-1637 A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are … Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 5.9 CVE-2020-1629 A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while pro… Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 5.5 CVE-2020-1630 A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual Routing Engines (RE), Virtual Chassis (VC) or high-ava… Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 5.3 CVE-2020-1628 Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing t… Junos Mitigation only Fix from $1,6002020-04-08 CRITICAL 10.0 CVE-2020-1614 A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF) instance, which allows an attac… Junos 19.2+ Fix from $2,3002020-04-08 CRITICAL 9.8 CVE-2020-1615 The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these … Junos Mitigation only Fix from $2,3002020-04-08 HIGH 7.5 CVE-2020-1613 A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receivin… Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1617 This issue occurs on Juniper Networks Junos OS devices which do not support Advanced Forwarding Interface (AFI) / Advanced Forwarding Toolkit (AFT). … Junos Mitigation only Fix from $1,9502020-04-08 HIGH 7.5 CVE-2020-1626 A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific pack… Junos Os Evolved Mitigation only Fix from $1,9502020-04-08 MEDIUM 6.8 CVE-2020-1618 On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without… Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 6.7 CVE-2020-1619 A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Next-Generation Routing Engine … Junos Mitigation only Fix from $1,6002020-04-08 MEDIUM 6.5 CVE-2020-1625 The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated Routing and Bridging (IRB) is … Junos No fix yet Fix from $1,6002020-04-08 MEDIUM 5.5 CVE-2020-1620 A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of J… Junos Os Evolved 19.3r1+ Fix from $1,6002020-04-08 MEDIUM 5.5 CVE-2020-1621 A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos O… Junos Os Evolved 19.3r1+ Fix from $1,6002020-04-08 MEDIUM 5.5 CVE-2020-1622 A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affec… Junos Os Evolved 19.1r1+ Fix from $1,6002020-04-08 MEDIUM 5.5 CVE-2020-1623 A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all version… Junos Os Evolved 19.2r1+ Fix from $1,6002020-04-08 MEDIUM 5.5 CVE-2020-1624 A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This is… Junos Os Evolved 19.1r1+ Fix from $1,6002020-04-08 MEDIUM 5.3 CVE-2020-1616 Due to insufficient server-side login attempt limit enforcement, a vulnerability in the SSH login service of Juniper Networks Juniper Advanced Threat… Advanced Threat Protection 5.0.6.0+ Fix from $1,6002020-04-08 MEDIUM 6.5 CVE-2015-3006 On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient… Junos Mitigation only Fix from $1,6002020-02-28 MEDIUM 6.5 CVE-2015-5361 Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data c… Junos Mitigation only Fix from $1,6002020-02-28 HIGH 7.1 CVE-2014-6447 Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (D… Junos Mitigation only Fix from $1,9502020-02-11 HIGH 7.8 CVE-2014-6448 Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.8 CVE-2020-1602 When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.8 CVE-2020-1605 When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.8 CVE-2020-1609 When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.6 CVE-2020-1603 Specific IPv6 packets sent by clients processed by the Routing Engine (RE) are improperly handled. These IPv6 packets are designed to be blocked by t… Junos Mitigation only Fix from $1,9502020-01-15 HIGH 8.1 CVE-2020-1606 A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable perm… Junos Mitigation only Fix from $1,9502020-01-15