Vulnerabilities

Juniper Junos 23.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

156CVEs

CVE-2024-30380

Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV

Published 2024-04-16 · Analyzed

7.1EPSS 0.003

CVE-2024-21618

Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-21593

Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-21605

Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-21609

Junos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2025-52953

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52949

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-21910

Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2026-57020

Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57027

Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-33800

Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57019

Junos OS: MX Series: Specific traffic causes an FPC to reset

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2025-52955

Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-0203

Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart

Published 2026-01-15 · Modified

7.1EPSS 0.003

CVE-2025-52964

Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-21909

Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2024-39560

Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash

Published 2024-07-10 · Analyzed

7.1EPSS 0.002

CVE-2024-39517

Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

Published 2024-07-10 · Analyzed

7.1EPSS 0.002

CVE-2024-39514

Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash

Published 2024-07-10 · Analyzed

7.1EPSS 0.002

CVE-2025-30646

Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-30647

Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21600

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21593

Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21602

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2026-33775

Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd

Published 2026-04-09 · Analyzed

7.1EPSS 0.002

CVE-2026-33780

Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald

Published 2026-04-09 · Analyzed

7.1EPSS 0.002

CVE-2024-39556

Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow

Published 2024-07-10 · Analyzed

7.1EPSS 0.001

CVE-2026-57021

Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash

Published 2026-07-09 · Analyzed

6.9EPSS 0.005

CVE-2025-60011

Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

Published 2026-01-15 · Analyzed

6.9EPSS 0.005

CVE-2026-57024

Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2025-30657

Junos OS: Processing of a specific BGP update causes the SRRD process to crash

Published 2025-04-09 · Analyzed

6.9EPSS 0.004

CVE-2026-57054

Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2025-52951

Junos OS: IPv6 firewall filter fails to match payload-protocol

Published 2025-07-11 · Analyzed

6.9EPSS 0.003

CVE-2024-39561

Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

Published 2024-07-10 · Analyzed

6.9EPSS 0.003

CVE-2024-39533

Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used

Published 2024-07-11 · Analyzed

6.9EPSS 0.003

CVE-2025-59980

Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed

Published 2025-10-09 · Analyzed

6.9EPSS 0.003

CVE-2025-6549

Junos OS: SRX Series: J-Web can be exposed on additional interfaces

Published 2025-07-11 · Analyzed

6.9EPSS 0.002

CVE-2026-33774

Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect

Published 2026-04-09 · Analyzed

6.9EPSS 0.002

CVE-2024-39527

Junos OS: SRX Series: Low privileged user able to access sensitive information on file system

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2024-47496

Junos OS: MX Series: The PFE will crash on running specific command

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

Juniper Junos 23.2

Security check