Vulnerabilities

Juniper Junos 21.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

238CVEs

CVE-2026-21910

Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2025-52955

Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-0203

Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart

Published 2026-01-15 · Modified

7.1EPSS 0.003

CVE-2024-30386

Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2025-52964

Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2024-39558

Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR

Published 2024-07-10 · Analyzed

7.1EPSS 0.003

CVE-2025-21595

Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash

Published 2025-04-09 · Analyzed

7.1EPSS 0.003

CVE-2024-39560

Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash

Published 2024-07-10 · Analyzed

7.1EPSS 0.002

CVE-2024-39514

Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash

Published 2024-07-10 · Analyzed

7.1EPSS 0.002

CVE-2024-39517

Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

Published 2024-07-10 · Analyzed

7.1EPSS 0.002

CVE-2025-30647

Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-30646

Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21600

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21593

Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21602

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2024-30387

Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash

Published 2024-04-12 · Analyzed

7.1EPSS 0.002

CVE-2024-39556

Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow

Published 2024-07-10 · Analyzed

7.1EPSS 0.001

CVE-2025-59957

Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor

Published 2025-10-09 · Analyzed

7.0EPSS 0.002

CVE-2025-30657

Junos OS: Processing of a specific BGP update causes the SRRD process to crash

Published 2025-04-09 · Analyzed

6.9EPSS 0.004

CVE-2024-30389

Junos OS: EX4300 Series: Firewall filter not blocking egress traffic

Published 2024-04-12 · Analyzed

6.9EPSS 0.004

CVE-2024-30410

Junos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term.

Published 2024-04-12 · Analyzed

6.9EPSS 0.004

CVE-2025-52951

Junos OS: IPv6 firewall filter fails to match payload-protocol

Published 2025-07-11 · Analyzed

6.9EPSS 0.003

CVE-2024-39561

Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

Published 2024-07-10 · Analyzed

6.9EPSS 0.003

CVE-2024-39533

Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used

Published 2024-07-11 · Analyzed

6.9EPSS 0.003

CVE-2024-47507

Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted

Published 2024-10-11 · Analyzed

6.9EPSS 0.003

CVE-2025-6549

Junos OS: SRX Series: J-Web can be exposed on additional interfaces

Published 2025-07-11 · Analyzed

6.9EPSS 0.002

CVE-2024-30378

Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands

Published 2024-04-16 · Analyzed

6.9EPSS 0.002

CVE-2021-25220

DNS forwarders - cache poisoning vulnerability

Published 2022-03-23 · Modified

6.8EPSS 0.034

CVE-2023-28972

Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery

Published 2023-04-17 · Modified

6.8EPSS 0.004

CVE-2024-39527

Junos OS: SRX Series: Low privileged user able to access sensitive information on file system

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2024-47501

Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2024-47496

Junos OS: MX Series: The PFE will crash on running specific command

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2025-30654

Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information

Published 2025-04-09 · Analyzed

6.8EPSS 0.002

CVE-2024-30384

Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur

Published 2024-04-12 · Analyzed

6.8EPSS 0.002

CVE-2025-21592

Junos OS: SRX Series: Low privileged user able to access highly sensitive information on file system

Published 2025-01-09 · Analyzed

6.8EPSS 0.002

CVE-2025-30652

Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

Published 2025-04-09 · Analyzed

6.8EPSS 0.002

CVE-2025-21596

Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash

Published 2025-01-09 · Analyzed

6.8EPSS 0.002

CVE-2024-39511

Junos OS: The 802.1X Authentication Daemon crashes on running a specific command

Published 2024-07-10 · Analyzed

6.8EPSS 0.001

CVE-2025-30655

Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled

Published 2025-04-09 · Analyzed

6.8EPSS 0.001

CVE-2025-52963

Junos OS: A low-privileged user can disable an interface

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

Juniper Junos 21.4

Security check