Vulnerabilities

Juniper QFX5110 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

65CVEs

CVE-2019-0006

Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration

Published 2019-01-15 · Modified

9.8EPSS 0.053

CVE-2019-0008

QFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process

Published 2019-04-10 · Modified

9.8EPSS 0.045

CVE-2018-0052

Junos OS: Unauthenticated remote root access possible when RSH service is enabled

Published 2018-10-10 · Modified

9.3EPSS 0.049

CVE-2018-0043

Junos OS: RPD daemon crashes upon receipt of specific MPLS packet

Published 2018-10-10 · Modified

8.8EPSS 0.012

CVE-2018-0045

Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration

Published 2018-10-10 · Modified

8.8EPSS 0.011

CVE-2018-0005

Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

Published 2018-01-10 · Modified

8.8EPSS 0.007

CVE-2017-2341

Junos OS: VM to host privilege escalation in platforms with Junos OS running in a virtualized environment.

Published 2017-07-14 · Modified

8.8EPSS 0.004

CVE-2024-47497

Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2020-1613

Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

Published 2020-04-08 · Modified

8.6EPSS 0.013

CVE-2021-0203

Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

Published 2021-01-15 · Modified

8.6EPSS 0.010

CVE-2020-1606

Junos OS: Path traversal vulnerability in J-Web

Published 2020-01-15 · Modified

8.1EPSS 0.009

CVE-2018-0022

Junos OS: Mbuf leak due to processing MPLS packets in VPLS network.

Published 2018-04-11 · Modified

7.8EPSS 0.022

CVE-2018-0020

Junos OS: rpd daemon cores due to malformed BGP UPDATE packet

Published 2018-04-11 · Modified

7.8EPSS 0.013

CVE-2025-30644

Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled

Published 2025-04-09 · Analyzed

7.7EPSS 0.003

CVE-2018-0062

Junos OS: Denial of Service in J-Web

Published 2018-10-10 · Modified

7.5EPSS 0.023

CVE-2018-0049

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

Published 2018-10-10 · Modified

7.5EPSS 0.022

CVE-2019-0014

Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

Published 2019-01-15 · Modified

7.5EPSS 0.017

CVE-2022-22188

Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will cause a device to hang.

Published 2022-04-14 · Modified

7.5EPSS 0.015

CVE-2019-0043

Junos OS: RPD process crashes upon receipt of a specific SNMP packet

Published 2019-04-10 · Modified

7.5EPSS 0.013

CVE-2021-0207

NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

Published 2021-01-15 · Modified

7.5EPSS 0.013

CVE-2020-1679

Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

Published 2020-10-16 · Modified

7.5EPSS 0.012

CVE-2021-0285

Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic

Published 2021-07-15 · Modified

7.5EPSS 0.010

CVE-2022-22174

Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2020-1607

Junos OS: Cross-Site Scripting (XSS) in J-Web

Published 2020-01-15 · Modified

7.5EPSS 0.009

CVE-2024-21595

Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang

Published 2024-01-12 · Modified

7.5EPSS 0.005

CVE-2021-0217

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

Published 2021-01-15 · Modified

7.4EPSS 0.007

CVE-2021-0222

Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.

Published 2021-01-15 · Modified

7.4EPSS 0.006

CVE-2021-0259

Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario

Published 2021-04-22 · Modified

7.4EPSS 0.004

CVE-2018-0008

Junos OS: commit script may allow unauthenticated root login upon reboot

Published 2018-01-10 · Modified

7.2EPSS 0.005

CVE-2024-47498

Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect

Published 2024-10-11 · Analyzed

7.1EPSS 0.003

CVE-2024-30388

Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2026-21910

Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2025-59969

Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart

Published 2026-04-09 · Analyzed

7.1EPSS 0.002

CVE-2026-33781

Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed

Published 2026-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-59957

Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor

Published 2025-10-09 · Analyzed

7.0EPSS 0.002

CVE-2020-1618

Junos OS: EX and QFX Series: Console port authentication bypass vulnerability

Published 2020-04-08 · Modified

6.9EPSS 0.004

CVE-2024-39533

Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used

Published 2024-07-11 · Analyzed

6.9EPSS 0.003

CVE-2026-33773

Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

Published 2026-04-09 · Analyzed

6.9EPSS 0.002

CVE-2021-0247

Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.

Published 2021-04-22 · Modified

6.8EPSS 0.006

CVE-2026-57025

Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

Published 2026-07-09 · Modified

6.8EPSS 0.001

Juniper QFX5110 any version

Security check