Vulnerabilities

Juniper JUNOS OS Evolved 21.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

126CVEs

CVE-2024-30390

Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced

Published 2024-04-12 · Analyzed

6.9EPSS 0.005

CVE-2024-39553

Junos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).

Published 2024-07-11 · Analyzed

6.9EPSS 0.004

CVE-2024-39537

Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network

Published 2024-07-11 · Analyzed

6.9EPSS 0.003

CVE-2024-47507

Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted

Published 2024-10-11 · Analyzed

6.9EPSS 0.003

CVE-2025-30654

Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information

Published 2025-04-09 · Analyzed

6.8EPSS 0.002

CVE-2025-30652

Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

Published 2025-04-09 · Analyzed

6.8EPSS 0.002

CVE-2025-30655

Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled

Published 2025-04-09 · Analyzed

6.8EPSS 0.001

CVE-2024-39513

Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager

Published 2024-07-10 · Analyzed

6.8EPSS 0.001

CVE-2023-44184

Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command

Published 2023-10-12 · Analyzed

6.5EPSS 0.005

CVE-2022-22214

Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2023-36833

Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2022-22230

Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22250

Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2023-22406

Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-28981

Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-36849

Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2024-21613

Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-36839

Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2023-44204

Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message

Published 2023-10-12 · Analyzed

6.5EPSS 0.003

CVE-2023-44196

Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE

Published 2023-10-12 · Modified

6.5EPSS 0.002

CVE-2023-22397

Junos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service

Published 2023-01-12 · Modified

6.1EPSS 0.002

CVE-2023-44189

Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability

Published 2023-10-11 · Modified

6.1EPSS 0.002

CVE-2023-44190

Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability

Published 2023-10-11 · Modified

6.1EPSS 0.002

CVE-2024-39528

Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash

Published 2024-07-11 · Modified

6.0EPSS 0.003

CVE-2025-21597

Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed

Published 2025-04-09 · Analyzed

6.0EPSS 0.002

CVE-2024-39536

Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

CVE-2022-22213

Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update

Published 2022-07-20 · Modified

5.9EPSS 0.007

CVE-2024-21585

Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash

Published 2024-01-12 · Modified

5.9EPSS 0.006

CVE-2023-22402

Junos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps

Published 2023-01-12 · Modified

5.9EPSS 0.005

CVE-2023-44187

Junos OS Evolved: 'file copy' CLI command can disclose password to shell users

Published 2023-10-11 · Modified

5.9EPSS 0.002

CVE-2023-36840

Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run

Published 2023-07-14 · Modified

5.5EPSS 0.002

CVE-2022-22233

Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash

Published 2022-10-18 · Modified

5.5EPSS 0.002

CVE-2023-28980

Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued

Published 2023-04-17 · Modified

5.5EPSS 0.002

CVE-2023-44178

Junos OS : Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44176

Junos OS : Stack overflow vulnerability in CLI command processing