Vulnerabilities

Juniper Junos 22.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

152CVEs

CVE-2024-30409

Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).

Published 2024-04-12 · Analyzed

6.9EPSS 0.005

CVE-2024-39561

Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

Published 2024-07-10 · Analyzed

6.9EPSS 0.003

CVE-2024-39533

Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used

Published 2024-07-11 · Analyzed

6.9EPSS 0.003

CVE-2024-30378

Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands

Published 2024-04-16 · Analyzed

6.9EPSS 0.002

CVE-2021-25220

DNS forwarders - cache poisoning vulnerability

Published 2022-03-23 · Modified

6.8EPSS 0.034

CVE-2023-28972

Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery

Published 2023-04-17 · Modified

6.8EPSS 0.004

CVE-2024-39511

Junos OS: The 802.1X Authentication Daemon crashes on running a specific command

Published 2024-07-10 · Analyzed

6.8EPSS 0.001

CVE-2023-22404

Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received

Published 2023-01-12 · Modified

6.5EPSS 0.006

CVE-2022-22202

Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations

Published 2022-07-20 · Modified

6.5EPSS 0.005

CVE-2024-21603

Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash

Published 2024-01-12 · Modified

6.5EPSS 0.005

CVE-2023-44184

Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command

Published 2023-10-12 · Analyzed

6.5EPSS 0.005

CVE-2022-22237

Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally

Published 2022-10-18 · Modified

6.5EPSS 0.004

CVE-2024-21600

Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-44183

Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2023-1697

Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-22414

Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22405

Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22406

Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-28959

Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-28970

Junos OS: JRR200: Kernel crash upon receipt of a specific packet

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-28981

Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-36848

Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36849

Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36850

Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-22395

Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2024-21599

Junos OS: MX Series: MPC3E memory leak with PTP configuration

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-36842

Junos OS: jdhcpd will hang on receiving a specific DHCP packet

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2024-21617

Junos OS: BGP flap on NSR-enabled devices causes memory leak

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22392

Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2024-21587

Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2024-21613

Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-44203

Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2023-36839

Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2023-44204

Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message

Published 2023-10-12 · Analyzed

6.5EPSS 0.003

CVE-2022-22242

Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web

Published 2022-10-18 · Modified

6.1EPSS 0.028

CVE-2025-21597

Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed

Published 2025-04-09 · Analyzed

6.0EPSS 0.002

CVE-2024-39536

Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

CVE-2024-39539

Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

CVE-2025-59962

Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash

Published 2025-10-09 · Analyzed

6.0EPSS 0.002

CVE-2024-21585

Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash

Published 2024-01-12 · Modified

5.9EPSS 0.006

Juniper Junos 22.1

Security check