VendorsJunipermx304all versions

Vulnerabilities

Juniper MX304

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

36CVEs

CVE-2026-33785

Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario

Published 2026-04-09 · Analyzed

8.8EPSS 0.001

CVE-2024-30392

Junos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occurs

Published 2024-04-12 · Analyzed

8.7EPSS 0.007

CVE-2024-47497

Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2024-39545

Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash

Published 2024-07-11 · Analyzed

8.7EPSS 0.005

CVE-2024-39551

Junos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop

Published 2024-07-11 · Analyzed

8.7EPSS 0.005

CVE-2025-30660

Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset

Published 2025-04-09 · Analyzed

8.7EPSS 0.004

CVE-2025-30656

Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crash

Published 2025-04-09 · Analyzed

8.7EPSS 0.004

CVE-2025-21594

Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block

Published 2025-04-09 · Analyzed

8.7EPSS 0.004

CVE-2026-21905

Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.004

CVE-2026-21918

Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes

Published 2026-01-15 · Analyzed

8.7EPSS 0.004

CVE-2026-33778

Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes

Published 2026-04-09 · Analyzed

8.7EPSS 0.003

CVE-2026-33782

Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts

Published 2026-04-09 · Analyzed

8.7EPSS 0.003

CVE-2025-30650

Junos OS: Privileged local user can gain access to a Linux-based FPC as root

Published 2026-04-08 · Analyzed

8.4EPSS 0.001

CVE-2024-30401

Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman

Published 2024-04-12 · Analyzed

8.2EPSS 0.006

CVE-2025-52982

Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash

Published 2025-07-11 · Analyzed

8.2EPSS 0.004

CVE-2025-52960

Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash

Published 2025-10-09 · Analyzed

8.2EPSS 0.003

CVE-2023-44199

Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44198

Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

Published 2023-10-12 · Modified

7.5EPSS 0.004

CVE-2024-47493

Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash

Published 2024-10-11 · Analyzed

7.1EPSS 0.004

CVE-2024-39526

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets

Published 2024-10-11 · Analyzed

7.1EPSS 0.004

CVE-2024-21593

Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2026-57019

Junos OS: MX Series: Specific traffic causes an FPC to reset

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2025-30647

Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2026-33775

Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd

Published 2026-04-09 · Analyzed

7.1EPSS 0.002

CVE-2026-57054

Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2024-30378

Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands

Published 2024-04-16 · Analyzed

6.9EPSS 0.002

CVE-2026-33774

Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect

Published 2026-04-09 · Analyzed

6.9EPSS 0.002

CVE-2024-47501

Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash

Published 2024-10-11 · Analyzed

6.8EPSS 0.002

CVE-2025-60007

Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash

Published 2026-01-15 · Modified

6.8EPSS 0.001

CVE-2026-57025

Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

Published 2026-07-09 · Modified

6.8EPSS 0.001

CVE-2024-21587

Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2024-39539

Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

CVE-2023-44193

Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2024-21610

Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck

Published 2024-04-12 · Modified

5.3EPSS 0.005

CVE-2024-21607

Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected

Published 2024-01-12 · Modified

5.3EPSS 0.003

CVE-2026-57031

Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect

Published 2026-07-09 · Analyzed

5.3EPSS 0.002

Juniper MX304

Security check