Priority HIGH 81
An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to exe…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.18476 · Published 2026-02-25 · Fixed in 25.4R1-S1-EVO, 25.4R2-EVO CWE-732
Priority MEDIUM 63
A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deactivating a specific SSH configuration para…
CVSS 4.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00177 · Published 2026-07-09 · Fixed in 22.3R3-S5, 22.4R3-S10 +4 CWE-476
Priority MEDIUM 57
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.18354 · Published 2023-08-31 · Fixed in 20.4R3-S10, 21.2R3-S5 +16 CWE-20
Priority MEDIUM 49
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-exe…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00568 · Published 2026-10-14 · Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +14 CWE-121
Priority MEDIUM 49
An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileg…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00549 · Published 2026-10-14 · Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +14 CWE-287
Priority MEDIUM 46
An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid BGP FlowSpec message thereby causing an u…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01333 · Published 2021-01-15 · Fixed in 15.1R7-S8, 17.3R3-S10 +25 CWE-754
Priority MEDIUM 45
A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver (jtd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00605 · Published 2025-01-09 · Fixed in 22.4R3-S5-EVO, 23.2R2-S2-EVO +3 CWE-401
Priority MEDIUM 45
An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS).
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00638 · Published 2024-10-11 · Fixed in 21.4R3-S9-EVO, 22.2R3-S4-EVO +3 CWE-770
Priority MEDIUM 45
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a De…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00638 · Published 2024-10-11 · Fixed in 21.2R3-S8, 21.4R3-S8 +14 CWE-754
Priority MEDIUM 45
A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an rpd crash, leading to Denial of Se…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00664 · Published 2024-04-12 · Fixed in 21.2R3-S7, 21.4R3-S5 +11 CWE-121
Priority MEDIUM 45
An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to send a specific rout…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0071 · Published 2024-04-12 · Fixed in 20.4R3-S10, 21.2R3-S8 +7 CWE-755
Priority MEDIUM 44
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a De…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00422 · Published 2025-10-09 · Fixed in 23.4R2-S5, 24.2R2-S1 +6 CWE-754
Priority MEDIUM 44
A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00407 · Published 2026-01-15 · Fixed in 22.4R3-S8, 23.2R2-S5 +8 CWE-126
Priority MEDIUM 44
A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update with a specifically malformed AS PATH to caus…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00517 · Published 2025-07-11 · Fixed in 21.2R3-S9, 22.2R3-S6 +8 CWE-416
Priority MEDIUM 44
A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Serv…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00433 · Published 2025-04-09 · Fixed in 21.2R3-S9, 21.4R3-S10 +10 CWE-805
Priority MEDIUM 44
This is a similar, but different vulnerability than the issue reported as CVE-2024-39549.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00419 · Published 2025-02-05 · Fixed in 22.4R3-S4, 22.4R3-S3-EVO CWE-415
Priority MEDIUM 44
A Missing Release of Resource after Effective Lifetime vulnerability the xinetd process, responsible for spawning SSH daemon (sshd) instances, of Juniper Networks Junos OS Evolved allows an unauthenticated network-based…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00431 · Published 2024-07-10 · Fixed in 21.4R3-S7-EVO, 22.3R2-S2-EVO +5 CWE-772
Priority MEDIUM 44
An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specific malformed BGP update message to ca…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00498 · Published 2024-07-10 · Fixed in 21.4R3-S8, 22.2R3-S4 +12 CWE-755
Priority MEDIUM 44
An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause the RPD proces…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00593 · Published 2024-07-11 · Fixed in 20.4R3-S9, 21.2R3-S7 +16 CWE-755
Priority MEDIUM 44
A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update wh…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00466 · Published 2024-07-11 · Fixed in 21.2R3-S8, 21.4R3-S8 +14 CWE-401
Priority MEDIUM 44
An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MPC10/11 or LC9600, MX304, and Junos OS Evolved on ACX Series an…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00473 · Published 2024-07-11 · Fixed in 21.2R3-S4, 21.4R2 +4 CWE-1286
Priority MEDIUM 44
An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (Do…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00437 · Published 2024-07-11 · Fixed in 21.4R3-S7-EVO, 22.1R3-S6-EVO +6 CWE-229
Priority MEDIUM 44
An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specific BGP…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00431 · Published 2024-10-09 · Fixed in 21.2R3-S8, 21.4R3-S8 +12 CWE-755
Priority MEDIUM 44
An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to c…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00431 · Published 2024-10-09 · Fixed in 21.4R3-S8, 22.2R3-S5 +10 CWE-125
Priority MEDIUM 44
An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifica…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00457 · Published 2024-10-09 · Fixed in 21.4R3-S8, 22.2R3-S5 +10 CWE-1288
Load more