VendorsJunipersrx550all versions

Vulnerabilities

Juniper SRX550

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

109CVEs

CVE-2019-0060

Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2019-0043

Junos OS: RPD process crashes upon receipt of a specific SNMP packet

Published 2019-04-10 · Modified

7.5EPSS 0.013

CVE-2021-0227

Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

Published 2021-04-22 · Modified

7.5EPSS 0.013

CVE-2021-0206

Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.

Published 2021-01-15 · Modified

7.5EPSS 0.013

CVE-2019-0068

Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2019-0075

Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2020-1634

Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

Published 2020-04-08 · Modified

7.5EPSS 0.013

CVE-2021-0261

Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

Published 2021-04-22 · Modified

7.5EPSS 0.011

CVE-2020-1601

Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.

Published 2020-01-15 · Modified

7.5EPSS 0.011

CVE-2017-10608

SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets.

Published 2017-10-13 · Modified

7.5EPSS 0.010

CVE-2022-22185

Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet

Published 2022-04-14 · Modified

7.5EPSS 0.010

CVE-2021-0230

Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics

Published 2021-04-22 · Modified

7.5EPSS 0.010

CVE-2022-22178

Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22153

SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22198

Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format

Published 2022-04-14 · Modified

7.5EPSS 0.009

CVE-2024-21619

Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information

Published 2024-01-25 · Modified

7.5EPSS 0.009

CVE-2020-1607

Junos OS: Cross-Site Scripting (XSS) in J-Web

Published 2020-01-15 · Modified

7.5EPSS 0.009

CVE-2022-22206

Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search

Published 2022-07-20 · Modified

7.5EPSS 0.008

CVE-2022-22205

Junos OS: SRX Series: An FPC memory leak can occur in an APBR scenario

Published 2022-07-20 · Modified

7.5EPSS 0.008

CVE-2023-22415

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received

Published 2023-01-12 · Modified

7.5EPSS 0.008

CVE-2022-22175

Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed

Published 2022-01-19 · Modified

7.5EPSS 0.007

CVE-2022-22232

SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2022-22231

SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2022-22236

Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2023-22416

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received

Published 2023-01-12 · Modified

7.5EPSS 0.007

CVE-2023-22417

Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2022-22235

Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed

Published 2022-10-18 · Modified

7.5EPSS 0.006

CVE-2023-36831

Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-28985

SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-22394

Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22411

Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2024-21606

Junos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash

Published 2024-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22412

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed

Published 2023-01-12 · Modified

7.5EPSS 0.005

CVE-2022-22218

Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment

Published 2022-10-18 · Modified

7.5EPSS 0.004

CVE-2023-44198

Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

Published 2023-10-12 · Modified

7.5EPSS 0.004

CVE-2021-0244

Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition

Published 2021-04-22 · Modified

7.4EPSS 0.006

CVE-2019-0054

Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.

Published 2019-10-09 · Modified

7.4EPSS 0.006

CVE-2017-10620

SRX Series: Antivirus updates are downloaded without verification

Published 2017-10-13 · Modified

7.4EPSS 0.006

CVE-2018-0008

Junos OS: commit script may allow unauthenticated root login upon reboot

Published 2018-01-10 · Modified

7.2EPSS 0.005

CVE-2014-0617

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash) via a crafted IP packet.

Published 2014-01-14 · Modified

7.1EPSS 0.023

Juniper SRX550

Security check