VendorsJuniperjunos_os_evolvedall versions

Vulnerabilities

Juniper JUNOS OS Evolved

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

249CVEs

CVE-2025-52988

Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'

Published 2025-07-11 · Analyzed

8.4EPSS 0.005

CVE-2024-47495

Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.

Published 2024-10-11 · Analyzed

8.4EPSS 0.002

CVE-2025-21598

Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash

Published 2025-01-09 · Analyzed

8.2EPSS 0.007

CVE-2024-47491

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash

Published 2024-10-11 · Analyzed

8.2EPSS 0.006

CVE-2024-47490

Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted

Published 2024-10-11 · Analyzed

8.2EPSS 0.006

CVE-2024-30402

Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription

Published 2024-04-12 · Analyzed

8.2EPSS 0.005

CVE-2025-52984

Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2026-33794

Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash

Published 2026-07-09 · Analyzed

8.2EPSS 0.004

CVE-2024-39559

Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR enabled

Published 2024-07-10 · Analyzed

8.2EPSS 0.004

CVE-2024-39554

Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash

Published 2024-07-10 · Analyzed

8.2EPSS 0.004

CVE-2023-28960

Junos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containers

Published 2023-04-17 · Modified

8.2EPSS 0.002

CVE-2021-0286

Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart

Published 2021-07-15 · Modified

7.8EPSS 0.011

CVE-2022-22195

Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash

Published 2022-04-14 · Modified

7.8EPSS 0.011

CVE-2022-22183

Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.

Published 2022-04-14 · Modified

7.8EPSS 0.010

CVE-2021-31356

Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts

Published 2021-10-19 · Modified

7.8EPSS 0.009

CVE-2021-31357

Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script

Published 2021-10-19 · Modified

7.8EPSS 0.006

CVE-2021-31358

Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script

Published 2021-10-19 · Modified

7.8EPSS 0.006

CVE-2021-31359

Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability

Published 2021-10-19 · Modified

7.8EPSS 0.002

CVE-2023-28966

Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root

Published 2023-04-17 · Modified

7.8EPSS 0.002

CVE-2023-4481

Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

Published 2023-08-31 · Modified

7.5EPSS 0.182

CVE-2020-1626

Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets

Published 2020-04-08 · Modified

7.5EPSS 0.014

CVE-2020-1638

Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.

Published 2020-04-08 · Modified

7.5EPSS 0.013

CVE-2020-1644

Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets

Published 2020-07-17 · Modified

7.5EPSS 0.013

CVE-2020-1648

Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet

Published 2020-07-17 · Modified

7.5EPSS 0.013

CVE-2021-31353

Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update

Published 2021-10-19 · Modified

7.5EPSS 0.012

CVE-2022-22197

Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening

Published 2022-04-14 · Modified

7.5EPSS 0.011

CVE-2021-0250

Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

Published 2021-04-22 · Modified

7.5EPSS 0.010

CVE-2021-31374

Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.

Published 2021-10-19 · Modified

7.5EPSS 0.010

CVE-2020-1646

Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.

Published 2020-07-17 · Modified

7.5EPSS 0.010

CVE-2021-31383

Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.

Published 2021-10-19 · Modified

7.5EPSS 0.010

CVE-2022-22194

Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart

Published 2022-04-14 · Modified

7.5EPSS 0.010

CVE-2021-0264

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured

Published 2021-04-22 · Modified

7.5EPSS 0.010

CVE-2022-22177

Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.

Published 2022-01-19 · Modified

7.5EPSS 0.010

CVE-2021-0226

Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet

Published 2021-04-22 · Modified

7.5EPSS 0.009

CVE-2022-22212

Junos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops

Published 2022-07-20 · Modified

7.5EPSS 0.008

CVE-2022-22192

Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device