Vulnerabilities

Juniper Junos 23.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

120CVEs

CVE-2025-21600

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21602

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21593

Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2026-21919

Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability

Published 2026-04-09 · Analyzed

7.1EPSS 0.002

CVE-2024-39556

Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow

Published 2024-07-10 · Analyzed

7.1EPSS 0.001

CVE-2026-57021

Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash

Published 2026-07-09 · Analyzed

6.9EPSS 0.005

CVE-2025-60011

Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

Published 2026-01-15 · Analyzed

6.9EPSS 0.005

CVE-2026-57024

Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2026-57054

Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2025-52951

Junos OS: IPv6 firewall filter fails to match payload-protocol

Published 2025-07-11 · Analyzed

6.9EPSS 0.003

CVE-2024-39561

Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

Published 2024-07-10 · Analyzed

6.9EPSS 0.003

CVE-2026-33773

Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

Published 2026-04-09 · Analyzed

6.9EPSS 0.003

CVE-2025-59980

Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed

Published 2025-10-09 · Analyzed

6.9EPSS 0.003

CVE-2026-33774

Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect

Published 2026-04-09 · Analyzed

6.9EPSS 0.003

CVE-2025-6549

Junos OS: SRX Series: J-Web can be exposed on additional interfaces

Published 2025-07-11 · Analyzed

6.9EPSS 0.002

CVE-2024-39527

Junos OS: SRX Series: Low privileged user able to access sensitive information on file system

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2024-47496

Junos OS: MX Series: The PFE will crash on running specific command

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2025-30654

Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information

Published 2025-04-09 · Analyzed

6.8EPSS 0.002

CVE-2025-21592

Junos OS: SRX Series: Low privileged user able to access highly sensitive information on file system

Published 2025-01-09 · Analyzed

6.8EPSS 0.002

CVE-2025-30652

Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

Published 2025-04-09 · Analyzed

6.8EPSS 0.002

CVE-2025-21596

Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash

Published 2025-01-09 · Analyzed

6.8EPSS 0.002

CVE-2025-59959

Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2025-60007

Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash

Published 2026-01-15 · Modified

6.8EPSS 0.001

CVE-2025-30655

Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled

Published 2025-04-09 · Analyzed

6.8EPSS 0.001

CVE-2026-57025

Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

Published 2026-07-09 · Modified

6.8EPSS 0.001

CVE-2025-52963

Junos OS: A low-privileged user can disable an interface

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2025-59961

Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2026-33787

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes

Published 2026-04-09 · Analyzed

6.8EPSS 0.001

CVE-2026-33776

Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information

Published 2026-04-09 · Analyzed

6.8EPSS 0.001

CVE-2026-33802

Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command

Published 2026-07-09 · Analyzed

6.8EPSS 0.001

CVE-2025-52989

Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2025-52986

Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2026-21912

Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2025-21590

Junos OS: An local attacker with shell access can execute arbitrary code

Published 2025-03-12 · Analyzed

6.7KEVEPSS 0.017

CVE-2026-21901

Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash

Published 2026-07-09 · Analyzed

6.7EPSS 0.002

CVE-2025-30653

Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash

Published 2025-04-09 · Analyzed

6.5EPSS 0.002

CVE-2025-52958

Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash

Published 2025-07-11 · Analyzed

6.0EPSS 0.002

CVE-2025-60010

Junos OS and Junos OS Evolved: Device allows login for user with expired password

Published 2025-10-09 · Analyzed

5.4EPSS 0.002

CVE-2026-33799

Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash

Published 2026-07-09 · Analyzed

5.3EPSS 0.004

CVE-2026-57031

Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect

Published 2026-07-09 · Analyzed

5.3EPSS 0.002

Juniper Junos 23.4

Security check