Juniper Junos 20.2

Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.

Junos OS: Remote code execution vulnerability in overlayd service

Junos OS: Vulnerability in J-Web may allow deserialization without authentication

cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.

Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy

Junos OS: Unauthenticated access vulnerability in J-Web

Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled

Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)

Junos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces

Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root

Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.

Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session

Junos OS: PHP file inclusion vulnerability in J-Web

Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd

Junos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)

Junos OS: SRX Series: Persistent XSS vulnerability in J-Web

Junos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal

Junos OS: J-Web can be compromised through reflected XSS attacks

Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic

Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)

Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)

Junos OS: Command injection vulnerability in license-check daemon

Junos OS: Buffer overflow vulnerability in device control daemon

Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries

Junos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries

Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability

Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in

Junos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality

Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will cause a device to hang.

Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update

Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening

Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain

Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset

Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.

Junos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.

Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet