Vulnerabilities

Juniper QFX10008 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

37CVEs

CVE-2019-0006

Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration

Published 2019-01-15 · Modified

9.8EPSS 0.053

CVE-2018-0043

Junos OS: RPD daemon crashes upon receipt of specific MPLS packet

Published 2018-10-10 · Modified

8.8EPSS 0.012

CVE-2018-0005

Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

Published 2018-01-10 · Modified

8.8EPSS 0.007

CVE-2017-2341

Junos OS: VM to host privilege escalation in platforms with Junos OS running in a virtualized environment.

Published 2017-07-14 · Modified

8.8EPSS 0.004

CVE-2024-47497

Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2020-1613

Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

Published 2020-04-08 · Modified

8.6EPSS 0.013

CVE-2020-1617

Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.

Published 2020-04-08 · Modified

7.8EPSS 0.016

CVE-2018-0049

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

Published 2018-10-10 · Modified

7.5EPSS 0.022

CVE-2019-0014

Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

Published 2019-01-15 · Modified

7.5EPSS 0.017

CVE-2019-0043

Junos OS: RPD process crashes upon receipt of a specific SNMP packet

Published 2019-04-10 · Modified

7.5EPSS 0.013

CVE-2020-1679

Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

Published 2020-10-16 · Modified

7.5EPSS 0.012

CVE-2021-0280

Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine

Published 2021-07-15 · Modified

7.5EPSS 0.010

CVE-2020-1607

Junos OS: Cross-Site Scripting (XSS) in J-Web

Published 2020-01-15 · Modified

7.5EPSS 0.009

CVE-2022-22223

Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.

Published 2022-10-18 · Modified

7.5EPSS 0.008

CVE-2021-0270

Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment

Published 2021-04-22 · Modified

7.5EPSS 0.007

CVE-2023-22403

Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-36835

Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2021-0217

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

Published 2021-01-15 · Modified

7.4EPSS 0.007

CVE-2026-57020

Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2020-1618

Junos OS: EX and QFX Series: Console port authentication bypass vulnerability

Published 2020-04-08 · Modified

6.9EPSS 0.004

CVE-2026-33773

Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

Published 2026-04-09 · Analyzed

6.9EPSS 0.003

CVE-2021-0247

Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.

Published 2021-04-22 · Modified

6.8EPSS 0.006

CVE-2026-57025

Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

Published 2026-07-09 · Modified

6.8EPSS 0.001

CVE-2021-0272

Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2022-22217

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2023-1697

Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-22414

Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2021-0289

Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

Published 2021-07-15 · Modified

6.5EPSS 0.003

CVE-2021-0295

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.

Published 2021-07-15 · Modified

6.1EPSS 0.011

CVE-2026-57029

Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash

Published 2026-07-09 · Analyzed

6.0EPSS 0.002

CVE-2018-0034

Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core

Published 2018-07-11 · Modified

5.9EPSS 0.021

CVE-2019-0069

Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text

Published 2019-10-09 · Modified

5.9EPSS 0.002

CVE-2019-0074

Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.

Published 2019-10-09 · Modified

5.5EPSS 0.004

CVE-2021-31361

Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated

Published 2021-10-19 · Modified

5.3EPSS 0.010

CVE-2020-1661

Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet.

Published 2020-10-16 · Modified

5.3EPSS 0.010

CVE-2023-28984

Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged