Vulnerabilities

Juniper JUNOS OS Evolved 21.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

91CVEs

CVE-2021-31354

Junos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)

Published 2021-10-19 · Modified

8.8EPSS 0.006

CVE-2022-22239

Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation

Published 2022-10-18 · Modified

8.8EPSS 0.002

CVE-2024-30382

Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured

Published 2024-04-12 · Analyzed

8.7EPSS 0.007

CVE-2024-47499

Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2024-39552

Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash

Published 2024-07-11 · Analyzed

8.7EPSS 0.006

CVE-2024-21598

Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash

Published 2024-04-12 · Analyzed

8.7EPSS 0.006

CVE-2024-30395

Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash

Published 2024-04-12 · Analyzed

8.7EPSS 0.005

CVE-2024-39542

Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash

Published 2024-07-11 · Analyzed

8.7EPSS 0.005

CVE-2024-39549

Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak

Published 2024-07-11 · Modified

8.7EPSS 0.005

CVE-2024-39525

Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash

Published 2024-10-09 · Analyzed

8.7EPSS 0.004

CVE-2024-39564

Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash

Published 2025-02-05 · Analyzed

8.7EPSS 0.004

CVE-2025-30651

Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash

Published 2025-04-09 · Analyzed

8.7EPSS 0.004

CVE-2024-39521

Junos OS Evolved: CLI parameter processing issue allows privilege escalation

Published 2024-07-11 · Modified

8.5EPSS 0.003

CVE-2024-39520

Junos OS Evolved: CLI parameter processing issue allows privilege escalation

Published 2024-07-11 · Modified

8.5EPSS 0.003

CVE-2024-39523

Junos OS Evolved: CLI parameter processing issue allows privilege escalation

Published 2024-07-11 · Modified

8.5EPSS 0.003

CVE-2024-39524

Junos OS Evolved: CLI parameter processing issue allows privilege escalation

Published 2024-07-11 · Modified

8.5EPSS 0.003

CVE-2026-33788

Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs

Published 2026-04-09 · Analyzed

8.5EPSS 0.002

CVE-2024-47495

Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.

Published 2024-10-11 · Analyzed

8.4EPSS 0.002

CVE-2024-39559

Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR enabled

Published 2024-07-10 · Analyzed

8.2EPSS 0.004

CVE-2023-28960

Junos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containers

Published 2023-04-17 · Modified

8.2EPSS 0.002

CVE-2022-22195

Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash

Published 2022-04-14 · Modified

7.8EPSS 0.011

CVE-2022-22183

Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.

Published 2022-04-14 · Modified

7.8EPSS 0.010

CVE-2021-31356

Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts

Published 2021-10-19 · Modified

7.8EPSS 0.009

CVE-2021-31357

Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script

Published 2021-10-19 · Modified

7.8EPSS 0.006

CVE-2021-31358

Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script

Published 2021-10-19 · Modified

7.8EPSS 0.006

CVE-2023-28966

Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root

Published 2023-04-17 · Modified

7.8EPSS 0.002

CVE-2023-4481

Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

Published 2023-08-31 · Modified

7.5EPSS 0.182

CVE-2021-31353

Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update

Published 2021-10-19 · Modified

7.5EPSS 0.012

CVE-2022-22177

Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.

Published 2022-01-19 · Modified

7.5EPSS 0.010

CVE-2022-22212

Junos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops

Published 2022-07-20 · Modified

7.5EPSS 0.008

CVE-2022-22211

Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2023-28982

Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-0026

2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute

Published 2023-06-21 · Modified

7.5EPSS 0.006

CVE-2023-28967

Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-22400

Junos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crash

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-44186

Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor

Published 2023-10-11 · Modified

7.5EPSS 0.005

CVE-2024-21604

Junos OS Evolved: A high rate of specific traffic will cause a complete system outage

Published 2024-01-12 · Modified

7.5EPSS 0.005

CVE-2024-21612

Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE

Published 2024-01-12 · Modified

7.5EPSS 0.005

CVE-2023-44197

Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44185

Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet

Published 2023-10-12 · Modified

7.5EPSS 0.005

Juniper JUNOS OS Evolved 21.2

Security check