Vulnerabilities

Juniper Junos 21.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

244CVEs

CVE-2024-30380

Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV

Published 2024-04-16 · Analyzed

7.1EPSS 0.003

CVE-2024-21605

Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-21609

Junos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-30388

Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2025-52953

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52955

Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-0203

Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart

Published 2026-01-15 · Modified

7.1EPSS 0.003

CVE-2024-30386

Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-39558

Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR

Published 2024-07-10 · Analyzed

7.1EPSS 0.003

CVE-2025-52947

Junos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-21595

Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash

Published 2025-04-09 · Analyzed

7.1EPSS 0.003

CVE-2025-30646

Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-30647

Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21593

Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21602

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2024-30387

Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash

Published 2024-04-12 · Analyzed

7.1EPSS 0.002

CVE-2025-30657

Junos OS: Processing of a specific BGP update causes the SRRD process to crash

Published 2025-04-09 · Analyzed

6.9EPSS 0.004

CVE-2024-30410

Junos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term.

Published 2024-04-12 · Analyzed

6.9EPSS 0.004

CVE-2025-52951

Junos OS: IPv6 firewall filter fails to match payload-protocol

Published 2025-07-11 · Analyzed

6.9EPSS 0.003

CVE-2024-39561

Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

Published 2024-07-10 · Analyzed

6.9EPSS 0.003

CVE-2024-39533

Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used

Published 2024-07-11 · Analyzed

6.9EPSS 0.003

CVE-2024-30378

Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands

Published 2024-04-16 · Analyzed

6.9EPSS 0.002

CVE-2021-25220

DNS forwarders - cache poisoning vulnerability

Published 2022-03-23 · Modified

6.8EPSS 0.034

CVE-2023-28972

Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery

Published 2023-04-17 · Modified

6.8EPSS 0.004

CVE-2024-47501

Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2024-30384

Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur

Published 2024-04-12 · Analyzed

6.8EPSS 0.002

CVE-2025-30652

Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

Published 2025-04-09 · Analyzed

6.8EPSS 0.002

CVE-2024-39511

Junos OS: The 802.1X Authentication Daemon crashes on running a specific command

Published 2024-07-10 · Analyzed

6.8EPSS 0.001

CVE-2025-30655

Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled

Published 2025-04-09 · Analyzed

6.8EPSS 0.001

CVE-2025-52963

Junos OS: A low-privileged user can disable an interface

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2025-59961

Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2025-52986

Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2026-21912

Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2025-21590

Junos OS: An local attacker with shell access can execute arbitrary code

Published 2025-03-12 · Analyzed

6.7KEVEPSS 0.017

CVE-2023-22404

Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received

Published 2023-01-12 · Modified

6.5EPSS 0.006

CVE-2022-22215

Junos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion

Published 2022-07-20 · Modified

6.5EPSS 0.006

CVE-2022-22202

Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations

Published 2022-07-20 · Modified

6.5EPSS 0.005

CVE-2024-21603

Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash

Published 2024-01-12 · Modified

6.5EPSS 0.005

CVE-2023-44184

Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command

Published 2023-10-12 · Analyzed

6.5EPSS 0.005

CVE-2022-22249

Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain

Published 2022-10-18 · Modified

6.5EPSS 0.005

Juniper Junos 21.2

Security check