Vulnerabilities

Juniper Junos 22.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

196CVEs

CVE-2024-30397

Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process

Published 2024-04-12 · Modified

8.7EPSS 0.003

CVE-2025-52983

Junos OS: After removing ssh public key authentication root can still log in

Published 2025-07-11 · Analyzed

8.6EPSS 0.006

CVE-2025-52988

Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'

Published 2025-07-11 · Analyzed

8.4EPSS 0.005

CVE-2025-21598

Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash

Published 2025-01-09 · Analyzed

8.2EPSS 0.007

CVE-2024-47491

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash

Published 2024-10-11 · Analyzed

8.2EPSS 0.006

CVE-2024-30401

Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman

Published 2024-04-12 · Analyzed

8.2EPSS 0.006

CVE-2024-30402

Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription

Published 2024-04-12 · Analyzed

8.2EPSS 0.005

CVE-2025-52948

Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2025-52984

Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2025-52982

Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2024-39554

Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash

Published 2024-07-10 · Analyzed

8.2EPSS 0.004

CVE-2024-47494

Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

Published 2024-10-11 · Analyzed

8.2EPSS 0.004

CVE-2024-47506

Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash

Published 2024-10-11 · Analyzed

8.2EPSS 0.003

CVE-2025-30644

Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled

Published 2025-04-09 · Analyzed

7.7EPSS 0.003

CVE-2023-4481

Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

Published 2023-08-31 · Modified

7.5EPSS 0.182

CVE-2024-21619

Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information

Published 2024-01-25 · Modified

7.5EPSS 0.009

CVE-2023-22415

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received

Published 2023-01-12 · Modified

7.5EPSS 0.008

CVE-2024-21614

Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash

Published 2024-01-12 · Modified

7.5EPSS 0.007

CVE-2023-22416

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received

Published 2023-01-12 · Modified

7.5EPSS 0.007

CVE-2023-0026

2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute

Published 2023-06-21 · Modified

7.5EPSS 0.006

CVE-2023-36832

Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-36835

Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-22399

Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-36831

Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-22408

Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-28967

Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-22401

Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22393

Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2024-21611

Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash

Published 2024-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22396

Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2024-21606

Junos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash

Published 2024-01-12 · Modified

7.5EPSS 0.006

CVE-2023-36843

Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2024-21595

Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang

Published 2024-01-12 · Modified

7.5EPSS 0.005

CVE-2023-44186

Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor

Published 2023-10-11 · Modified

7.5EPSS 0.005

CVE-2023-44199

Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44181

Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2024-21616

Junos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail

Published 2024-01-12 · Modified

7.5EPSS 0.005

CVE-2023-36841

Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44175

Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44185

Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet

Published 2023-10-12 · Modified

7.5EPSS 0.005

Juniper Junos 22.2

Security check