Vulnerabilities

Juniper Junos 21.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

146CVEs

CVE-2022-22234

Junos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busy

Published 2022-10-18 · Modified

5.5EPSS 0.002

CVE-2023-22409

Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

Published 2023-01-12 · Modified

5.5EPSS 0.002

CVE-2024-21594

Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash

Published 2024-01-12 · Modified

5.5EPSS 0.002

CVE-2023-28980

Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued

Published 2023-04-17 · Modified

5.5EPSS 0.002

CVE-2023-44193

Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44176

Junos OS : Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44177

Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44178

Junos OS : Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44201

Junos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user.

Published 2023-10-12 · Modified

5.5EPSS 0.001

CVE-2023-36846

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.935

CVE-2023-36844

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.900

CVE-2023-36847

Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.835

CVE-2022-22204

Junos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP traffic

Published 2022-07-20 · Modified

5.3EPSS 0.007

CVE-2023-28968

Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open

Published 2023-04-17 · Modified

5.3EPSS 0.006

CVE-2024-21596

Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices

Published 2024-01-12 · Modified

5.3EPSS 0.005

CVE-2022-22244

Junos OS: Unauthenticated XPath Injection vulnerability in J-Web

Published 2022-10-18 · Modified

5.3EPSS 0.005

CVE-2023-28963

Junos OS: User-controlled input vulnerability in J-Web

Published 2023-04-17 · Modified

5.3EPSS 0.005

CVE-2024-21610

Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck

Published 2024-04-12 · Modified

5.3EPSS 0.005

CVE-2023-44188

Junos OS: jkdsd crash due to multiple telemetry requests

Published 2023-10-11 · Modified

5.3EPSS 0.003

CVE-2024-21607

Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected

Published 2024-01-12 · Modified

5.3EPSS 0.003

CVE-2023-28984

Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged

Published 2023-04-17 · Modified

5.3EPSS 0.002

CVE-2023-28979

Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails

Published 2023-04-17 · Modified

4.7EPSS 0.003

CVE-2023-36836

Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed

Published 2023-07-14 · Modified

4.7EPSS 0.002

CVE-2023-28975

Junos OS: The kernel will crash when certain USB devices are inserted

Published 2023-04-17 · Modified

4.6EPSS 0.003

CVE-2022-22245

Junos OS: Path traversal vulnerability in J-Web

Published 2022-10-18 · Modified

4.3EPSS 0.007

CVE-2022-22243

Junos OS: XPath Injection vulnerability in J-Web

Published 2022-10-18 · Modified

4.3EPSS 0.005

Juniper Junos 21.3

Security check