Browse CVEs

HIGH 7.5 CVE-2020-1608 Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge (BBE) service may trigger… Junos Mitigation only Fix from $1,9502020-01-15 MEDIUM 6.5 CVE-2020-1611 A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives mali… Junos Space Mitigation only Fix from $1,6002020-01-15 MEDIUM 6.1 CVE-2020-1607 Insufficient Cross-Site Scripting (XSS) protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target u… Junos Mitigation only Fix from $1,6002020-01-15 MEDIUM 5.3 CVE-2020-1604 On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certa… Junos Mitigation only Fix from $1,6002020-01-15 HIGH 7.5 CVE-2020-1601 Certain types of malformed Path Computation Element Protocol (PCEP) packets when received and processed by a Juniper Networks Junos OS device serving… Junos Mitigation only Fix from $1,9502020-01-15 MEDIUM 6.5 CVE-2020-1600 In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon… Junos Mitigation only Fix from $1,6002020-01-15 HIGH 8.8 CVE-2019-0070 An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX pla… Junos after 18.1 Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-0071 Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in speci… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0075 A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and … Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.1 CVE-2019-0073 The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow ano… Junos Mitigation only Fix from $1,9502019-10-09 MEDIUM 5.5 CVE-2019-0072 An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to… Sbr Carrier Mitigation only Fix from $1,6002019-10-09 MEDIUM 5.5 CVE-2019-0074 A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engin… Junos Mitigation only Fix from $1,6002019-10-09 HIGH 8.8 CVE-2019-0062 A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administra… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-0061 The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an i… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0063 When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might crash wh… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0064 On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may crash when a specific TCP packet… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0065 On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuou… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0066 An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attacker to cau… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0068 The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending t… Junos Mitigation only Fix from $1,9502019-10-09 MEDIUM 6.5 CVE-2019-0067 Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart (vmcore). By continuously sending a special… Junos Mitigation only Fix from $1,6002019-10-09 MEDIUM 5.5 CVE-2019-0069 On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, … Junos Mitigation only Fix from $1,6002019-10-09 HIGH 8.8 CVE-2019-0047 A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrativ… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-0057 An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access t… Junos after 18.1 Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-0058 A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticate… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0050 Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes … Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0051 SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd d… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0055 A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the de… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0056 This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insuf… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0059 A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specif… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0060 The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP pack… Junos Mitigation only Fix from $1,9502019-10-09