VendorsJuniperex3400all versions

Vulnerabilities

Juniper EX3400

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

58CVEs

CVE-2021-0211

Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.

Published 2021-01-15 · Modified

10.0EPSS 0.013

CVE-2019-0006

Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration

Published 2019-01-15 · Modified

9.8EPSS 0.053

CVE-2019-0002

Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect

Published 2019-01-15 · Modified

9.8EPSS 0.024

CVE-2018-0052

Junos OS: Unauthenticated remote root access possible when RSH service is enabled

Published 2018-10-10 · Modified

9.3EPSS 0.049

CVE-2021-0275

Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.

Published 2021-04-22 · Modified

9.3EPSS 0.012

CVE-2018-0043

Junos OS: RPD daemon crashes upon receipt of specific MPLS packet

Published 2018-10-10 · Modified

8.8EPSS 0.012

CVE-2018-0045

Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration

Published 2018-10-10 · Modified

8.8EPSS 0.011

CVE-2019-0062

Junos OS: Session fixation vulnerability in J-Web

Published 2019-10-09 · Modified

8.8EPSS 0.011

CVE-2024-21620

Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS

Published 2024-01-25 · Modified

8.8EPSS 0.009

CVE-2018-0005

Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

Published 2018-01-10 · Modified

8.8EPSS 0.007

CVE-2024-39565

Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device.

Published 2024-07-10 · Analyzed

8.8EPSS 0.005

CVE-2024-47497

Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2020-1613

Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

Published 2020-04-08 · Modified

8.6EPSS 0.013

CVE-2021-0203

Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

Published 2021-01-15 · Modified

8.6EPSS 0.010

CVE-2018-0022

Junos OS: Mbuf leak due to processing MPLS packets in VPLS network.

Published 2018-04-11 · Modified

7.8EPSS 0.022

CVE-2018-0020

Junos OS: rpd daemon cores due to malformed BGP UPDATE packet

Published 2018-04-11 · Modified

7.8EPSS 0.013

CVE-2021-31368

Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic

Published 2021-10-19 · Modified

7.8EPSS 0.011

CVE-2018-0024

Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root

Published 2018-07-11 · Modified

7.8EPSS 0.004

CVE-2022-22221

Junos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality

Published 2022-07-20 · Modified

7.8EPSS 0.002

CVE-2019-0071

Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS

Published 2019-10-09 · Modified

7.8EPSS 0.002

CVE-2025-30644

Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled

Published 2025-04-09 · Analyzed

7.7EPSS 0.003

CVE-2018-15504

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11.

Published 2018-08-18 · Modified

7.5EPSS 0.028

CVE-2018-0062

Junos OS: Denial of Service in J-Web

Published 2018-10-10 · Modified

7.5EPSS 0.023

CVE-2018-0049

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

Published 2018-10-10 · Modified

7.5EPSS 0.022

CVE-2019-0003

Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.

Published 2019-01-15 · Modified

7.5EPSS 0.019

CVE-2019-0043

Junos OS: RPD process crashes upon receipt of a specific SNMP packet

Published 2019-04-10 · Modified

7.5EPSS 0.013

CVE-2021-0207

NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

Published 2021-01-15 · Modified

7.5EPSS 0.013

CVE-2021-0261

Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

Published 2021-04-22 · Modified

7.5EPSS 0.011

CVE-2022-22180

Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2024-21619

Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information

Published 2024-01-25 · Modified

7.5EPSS 0.009

CVE-2020-1607

Junos OS: Cross-Site Scripting (XSS) in J-Web

Published 2020-01-15 · Modified

7.5EPSS 0.009

CVE-2023-44191

Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2021-0217

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

Published 2021-01-15 · Modified

7.4EPSS 0.007

CVE-2021-0222

Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.

Published 2021-01-15 · Modified

7.4EPSS 0.006

CVE-2021-0244

Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition

Published 2021-04-22 · Modified

7.4EPSS 0.006

CVE-2018-0008

Junos OS: commit script may allow unauthenticated root login upon reboot

Published 2018-01-10 · Modified

7.2EPSS 0.005

CVE-2026-57032

Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.004

CVE-2020-1618

Junos OS: EX and QFX Series: Console port authentication bypass vulnerability

Published 2020-04-08 · Modified

6.9EPSS 0.004

CVE-2026-33773

Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

Published 2026-04-09 · Analyzed

6.9EPSS 0.002

CVE-2025-60007

Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash

Published 2026-01-15 · Modified

6.8EPSS 0.001

Juniper EX3400

Security check