Vulnerabilities

Juniper MX10016 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

46CVEs

CVE-2021-0251

Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets

Published 2021-04-22 · Modified

8.6EPSS 0.011

CVE-2020-1608

Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service

Published 2020-01-15 · Modified

7.8EPSS 0.013

CVE-2018-15504

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11.

Published 2018-08-18 · Modified

7.5EPSS 0.028

CVE-2021-31379

Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.

Published 2021-10-19 · Modified

7.5EPSS 0.013

CVE-2019-0063

Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2019-0065

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2021-31351

Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset

Published 2021-10-19 · Modified

7.5EPSS 0.010

CVE-2021-0264

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured

Published 2021-04-22 · Modified

7.5EPSS 0.010

CVE-2022-22178

Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22153

SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22198

Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format

Published 2022-04-14 · Modified

7.5EPSS 0.009

CVE-2023-22415

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received

Published 2023-01-12 · Modified

7.5EPSS 0.008

CVE-2023-22410

Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.

Published 2023-01-12 · Modified

7.5EPSS 0.008

CVE-2022-22207

Junos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crash

Published 2022-07-20 · Modified

7.5EPSS 0.008

CVE-2022-22175

Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed

Published 2022-01-19 · Modified

7.5EPSS 0.007

CVE-2022-22236

Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2023-22416

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received

Published 2023-01-12 · Modified

7.5EPSS 0.007

CVE-2023-22413

Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-36832

Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-28985

SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-28976

Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-22394

Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22412

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed

Published 2023-01-12 · Modified

7.5EPSS 0.005

CVE-2023-28974

Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash

Published 2023-04-17 · Modified

7.4EPSS 0.003

CVE-2024-30378

Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands

Published 2024-04-16 · Analyzed

6.9EPSS 0.002

CVE-2024-47501

Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2023-22404

Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received

Published 2023-01-12 · Modified

6.5EPSS 0.006

CVE-2022-22249

Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain

Published 2022-10-18 · Modified

6.5EPSS 0.005

CVE-2021-31366

Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-0257

Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-0290

Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames

Published 2021-07-15 · Modified

6.5EPSS 0.004

CVE-2021-0288

Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs

Published 2021-07-15 · Modified

6.5EPSS 0.004

CVE-2022-22160

Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22210

Junos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenario

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2023-36848

Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36850

Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2024-21587

Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2021-0289

Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

Published 2021-07-15 · Modified

6.5EPSS 0.003

CVE-2024-39539

Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

CVE-2023-22409

Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

Published 2023-01-12 · Modified

5.5EPSS 0.002

Juniper MX10016 any version

Security check