Vulnerabilities

Juniper JUNOS OS Evolved 23.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

72CVEs

CVE-2024-47499

Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2024-47502

Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2025-21599

Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service

Published 2025-01-09 · Analyzed

8.7EPSS 0.006

CVE-2024-39555

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset

Published 2024-07-10 · Analyzed

8.7EPSS 0.005

CVE-2024-39549

Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak

Published 2024-07-11 · Modified

8.7EPSS 0.005

CVE-2024-39515

Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2024-10-09 · Analyzed

8.7EPSS 0.005

CVE-2025-52946

Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash

Published 2025-07-11 · Analyzed

8.7EPSS 0.004

CVE-2024-39531

Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols

Published 2024-07-11 · Analyzed

8.7EPSS 0.004

CVE-2024-39525

Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash

Published 2024-10-09 · Analyzed

8.7EPSS 0.004

CVE-2024-39516

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2024-10-09 · Analyzed

8.7EPSS 0.004

CVE-2025-60004

Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash

Published 2025-10-09 · Analyzed

8.7EPSS 0.004

CVE-2024-39564

Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash

Published 2025-02-05 · Analyzed

8.7EPSS 0.004

CVE-2025-60003

Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.004

CVE-2025-30651

Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash

Published 2025-04-09 · Analyzed

8.7EPSS 0.004

CVE-2026-33793

Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system

Published 2026-04-09 · Analyzed

8.5EPSS 0.002

CVE-2025-52954

Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system

Published 2025-07-11 · Analyzed

8.5EPSS 0.002

CVE-2026-33791

Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root

Published 2026-04-09 · Modified

8.4EPSS 0.007

CVE-2025-52988

Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'

Published 2025-07-11 · Analyzed

8.4EPSS 0.005

CVE-2024-47495

Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.

Published 2024-10-11 · Analyzed

8.4EPSS 0.002

CVE-2025-21598

Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash

Published 2025-01-09 · Analyzed

8.2EPSS 0.007

CVE-2024-47491

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash

Published 2024-10-11 · Analyzed

8.2EPSS 0.006

CVE-2024-47490

Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted

Published 2024-10-11 · Analyzed

8.2EPSS 0.006

CVE-2025-52984

Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2026-21908

Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process

Published 2026-01-15 · Analyzed

7.5EPSS 0.003

CVE-2025-59960

Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server

Published 2026-01-15 · Analyzed

7.4EPSS 0.003

CVE-2025-30648

Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash

Published 2025-04-09 · Analyzed

7.4EPSS 0.002

CVE-2025-52961

Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart

Published 2025-10-09 · Analyzed

7.1EPSS 0.005

CVE-2026-33783

Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes

Published 2026-04-09 · Analyzed

7.1EPSS 0.004

CVE-2026-21921

Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash

Published 2026-01-15 · Analyzed

7.1EPSS 0.004

CVE-2024-39526

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets

Published 2024-10-11 · Analyzed

7.1EPSS 0.004

CVE-2024-21590

Junos OS Evolved: Packets which are not destined to the device can reach the RE

Published 2024-04-12 · Analyzed

7.1EPSS 0.004

CVE-2024-39538

Junos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes

Published 2024-07-11 · Analyzed

7.1EPSS 0.003

CVE-2024-39541

Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash

Published 2024-07-11 · Analyzed

7.1EPSS 0.003

CVE-2024-39543

Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash

Published 2024-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52953

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-33780

Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald

Published 2026-04-09 · Analyzed

7.1EPSS 0.003

CVE-2025-52949

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52955

Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52964

Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-21909

Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

Juniper JUNOS OS Evolved 23.4

Security check