VendorsJuniperjunos_os_evolvedany version

Vulnerabilities

Juniper JUNOS OS Evolved any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

146CVEs

CVE-2023-44182

Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations

Published 2023-10-12 · Modified

8.8EPSS 0.006

CVE-2022-22239

Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation

Published 2022-10-18 · Modified

8.8EPSS 0.002

CVE-2024-39547

Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization

Published 2024-10-11 · Analyzed

8.7EPSS 0.010

CVE-2024-30382

Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured

Published 2024-04-12 · Analyzed

8.7EPSS 0.007

CVE-2024-30394

Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash

Published 2024-04-12 · Analyzed

8.7EPSS 0.007

CVE-2024-47499

Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2024-47502

Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2024-39552

Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash

Published 2024-07-11 · Analyzed

8.7EPSS 0.006

CVE-2024-30395

Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash

Published 2024-04-12 · Analyzed

8.7EPSS 0.005

CVE-2024-39555

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset

Published 2024-07-10 · Analyzed

8.7EPSS 0.005

CVE-2024-39549

Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak

Published 2024-07-11 · Modified

8.7EPSS 0.005

CVE-2024-39515

Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2024-10-09 · Analyzed

8.7EPSS 0.005

CVE-2025-52946

Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash

Published 2025-07-11 · Analyzed

8.7EPSS 0.004

CVE-2024-39531

Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols

Published 2024-07-11 · Analyzed

8.7EPSS 0.004

CVE-2024-39562

Junos OS Evolved: A high rate of SSH connections causes a Denial of Service

Published 2024-07-10 · Analyzed

8.7EPSS 0.004

CVE-2024-39516

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2024-10-09 · Analyzed

8.7EPSS 0.004

CVE-2024-39525

Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash

Published 2024-10-09 · Analyzed

8.7EPSS 0.004

CVE-2024-39564

Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash

Published 2025-02-05 · Analyzed

8.7EPSS 0.004

CVE-2025-60003

Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.004

CVE-2025-30651

Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash

Published 2025-04-09 · Analyzed

8.7EPSS 0.004

CVE-2024-39523

Junos OS Evolved: CLI parameter processing issue allows privilege escalation

Published 2024-07-11 · Modified

8.5EPSS 0.003

CVE-2024-39524

Junos OS Evolved: CLI parameter processing issue allows privilege escalation

Published 2024-07-11 · Modified

8.5EPSS 0.003

CVE-2024-39520

Junos OS Evolved: CLI parameter processing issue allows privilege escalation

Published 2024-07-11 · Modified

8.5EPSS 0.003

CVE-2024-39521

Junos OS Evolved: CLI parameter processing issue allows privilege escalation

Published 2024-07-11 · Modified

8.5EPSS 0.003

CVE-2026-33788

Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs

Published 2026-04-09 · Analyzed

8.5EPSS 0.002

CVE-2026-33793

Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system

Published 2026-04-09 · Analyzed

8.5EPSS 0.002

CVE-2025-52954

Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system

Published 2025-07-11 · Analyzed

8.5EPSS 0.002

CVE-2026-33791

Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root

Published 2026-04-09 · Modified

8.4EPSS 0.007

CVE-2025-52988

Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'

Published 2025-07-11 · Analyzed

8.4EPSS 0.005

CVE-2024-47495

Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.

Published 2024-10-11 · Analyzed

8.4EPSS 0.002

CVE-2024-47491

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash

Published 2024-10-11 · Analyzed

8.2EPSS 0.006

CVE-2024-47490

Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted

Published 2024-10-11 · Analyzed

8.2EPSS 0.006

CVE-2024-30402

Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription

Published 2024-04-12 · Analyzed

8.2EPSS 0.005

CVE-2025-52984

Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2024-39559

Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR enabled

Published 2024-07-10 · Analyzed

8.2EPSS 0.004

CVE-2024-39554

Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash

Published 2024-07-10 · Analyzed

8.2EPSS 0.004

CVE-2022-22195

Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash

Published 2022-04-14 · Modified

7.8EPSS 0.011

CVE-2021-31356

Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts

Published 2021-10-19 · Modified

7.8EPSS 0.009

CVE-2021-31357

Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script

Published 2021-10-19 · Modified

7.8EPSS 0.006

CVE-2021-31358

Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script

Published 2021-10-19 · Modified

7.8EPSS 0.006

Juniper JUNOS OS Evolved any version

Security check