Vulnerabilities

Juniper Junos 23.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

120CVEs

CVE-2025-52988

Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'

Published 2025-07-11 · Analyzed

8.4EPSS 0.005

CVE-2025-30650

Junos OS: Privileged local user can gain access to a Linux-based FPC as root

Published 2026-04-08 · Analyzed

8.4EPSS 0.001

CVE-2026-33779

Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication

Published 2026-04-09 · Analyzed

8.3EPSS 0.001

CVE-2025-21598

Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash

Published 2025-01-09 · Analyzed

8.2EPSS 0.007

CVE-2024-47491

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash

Published 2024-10-11 · Analyzed

8.2EPSS 0.006

CVE-2025-52948

Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2025-52984

Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2026-57022

Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE

Published 2026-07-09 · Analyzed

8.2EPSS 0.004

CVE-2024-47494

Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

Published 2024-10-11 · Analyzed

8.2EPSS 0.004

CVE-2025-52960

Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash

Published 2025-10-09 · Analyzed

8.2EPSS 0.003

CVE-2025-30644

Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled

Published 2025-04-09 · Analyzed

7.7EPSS 0.003

CVE-2026-21908

Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process

Published 2026-01-15 · Analyzed

7.5EPSS 0.003

CVE-2025-21591

Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash

Published 2025-04-09 · Analyzed

7.4EPSS 0.003

CVE-2025-59960

Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server

Published 2026-01-15 · Analyzed

7.4EPSS 0.003

CVE-2025-30648

Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash

Published 2025-04-09 · Analyzed

7.4EPSS 0.002

CVE-2026-21916

Junos OS: A low privileged user can escalate their privileges so that they can login as root

Published 2026-04-09 · Analyzed

7.3EPSS 0.001

CVE-2026-57032

Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.004

CVE-2026-21903

Junos OS: Subscribing to telemetry sensors at scale causes all FPCs to crash

Published 2026-01-15 · Analyzed

7.1EPSS 0.004

CVE-2026-21921

Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash

Published 2026-01-15 · Analyzed

7.1EPSS 0.004

CVE-2024-47493

Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash

Published 2024-10-11 · Analyzed

7.1EPSS 0.004

CVE-2024-47503

Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash

Published 2024-10-11 · Analyzed

7.1EPSS 0.003

CVE-2024-39543

Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash

Published 2024-07-11 · Analyzed

7.1EPSS 0.003

CVE-2024-39541

Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash

Published 2024-07-11 · Analyzed

7.1EPSS 0.003

CVE-2024-39550

Junos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service

Published 2024-07-11 · Modified

7.1EPSS 0.003

CVE-2025-52953

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52949

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-21910

Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2026-57027

Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57020

Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-33800

Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57019

Junos OS: MX Series: Specific traffic causes an FPC to reset

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-0203

Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart

Published 2026-01-15 · Modified

7.1EPSS 0.003

CVE-2025-52955

Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52964

Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-21909

Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2024-39517

Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

Published 2024-07-10 · Analyzed

7.1EPSS 0.002

CVE-2025-30646

Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-30647

Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21600

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21602

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

Juniper Junos 23.4

Security check