Read the docs
TI-2022-06491 Aliases CVE-2022-22156GHSA-74x6-4m9v-24wj

Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL

Priority LOW 33CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Spoofing
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-295.

Summary

An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The following command can be executed by an administrator via the CLI to refresh a script from a remote location, which is affected from this vulnerability: >request system scripts refresh-from (commit | event | extension-service | op | snmp) file filename url <https-url> This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2; 21.1 versions prior to 21.1R1-S1, 21.1R2.

Why it matters now

EPSS 0.0055 46th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Junos OS (Juniper Networks): 18.4R2-S9, 18.4R3-S9, 19.1R2-S3 +13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JuniperJunos OSbefore 18.4R2-S9, 18.4R3-S9; 19.1 to before 19.1R2-S3, 19.1R3-S7; 19.2 to before 19.2R1-S7, 19.2R3-S3; 19.3 to before 19.3R3-S4; 19.4 to before 19.4R3-S7; 20.1 to before 20.1R2-S2, 20.1R3; 20.2 to before 20.2R3; 20.3 to before 20.3R2-S1, 20.3R3; 20.4 to before 20.4R2; 21.1 to before 21.1R1-S1, 21.1R218.4R2-S9, 18.4R3-S9, 19.1R2-S3, 19.1R3-S7, 19.2R1-S7, 19.2R3-S3, 19.3R3-S4, 19.4R3-S7, 20.1R2-S2, 20.1R3, 20.2R3, 20.3R2-S1, 20.3R3, 20.4R2, 21.1R1-S1, 21.1R2Patch availableCNA
  • Junos OS VendorJuniper Affected before 18.4R2-S9, 18.4R3-S9; 19.1 to before 19.1R2-S3, 19.1R3-S7; 19.2 to before 19.2R1-S7, 19.2R3-S3; 19.3 to before 19.3R3-S4; 19.4 to before 19.4R3-S7; 20.1 to before 20.1R2-S2, 20.1R3; 20.2 to before 20.2R3; 20.3 to before 20.3R2-S1, 20.3R3; 20.4 to before 20.4R2; 21.1 to before 21.1R1-S1, 21.1R2 Fixed in 18.4R2-S9, 18.4R3-S9, 19.1R2-S3, 19.1R3-S7, 19.2R1-S7, 19.2R3-S3, 19.3R3-S4, 19.4R3-S7, 20.1R2-S2, 20.1R3, 20.2R3, 20.3R2-S1, 20.3R3, 20.4R2, 21.1R1-S1, 21.1R2 Patch available CNA

CPE configurations NVD · 112

CPEVersionsRoleVendor
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*up to 18.3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*18.4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*18.4 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*18.4 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*18.4 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*18.4 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*18.4 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*18.4 r1-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*18.4 r1-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*18.4 r1-s7VulnerableJuniper
  • cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* Versions up to 18.3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:* Versions 18.4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:* Versions 18.4 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:* Versions 18.4 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:* Versions 18.4 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:* Versions 18.4 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:* Versions 18.4 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:* Versions 18.4 r1-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:* Versions 18.4 r1-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:* Versions 18.4 r1-s7 Vulnerable ·Juniper
Show 102 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*18.4 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*18.4 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*18.4 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*18.4 r2-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*18.4 r2-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*18.4 r2-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*18.4 r2-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s7:*:*:*:*:*:*18.4 r2-s7VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s8:*:*:*:*:*:*18.4 r2-s8VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*18.4 r3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*18.4 r3-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*18.4 r3-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*18.4 r3-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*18.4 r3-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*18.4 r3-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*18.4 r3-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3-s7:*:*:*:*:*:*18.4 r3-s7VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r3-s8:*:*:*:*:*:*18.4 r3-s8VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*19.1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*19.1 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*19.1 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*19.1 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*19.1 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*19.1 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*19.1 r1-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*19.1 r1-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*19.1 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*19.1 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*19.1 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*19.1 r3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*19.1 r3-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*19.1 r3-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*19.1 r3-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*19.1 r3-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r3-s5:*:*:*:*:*:*19.1 r3-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r3-s6:*:*:*:*:*:*19.1 r3-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*19.2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*19.2 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*19.2 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*19.2 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*19.2 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*19.2 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*19.2 r1-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*19.2 r1-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*19.2 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*19.2 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*19.2 r3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*19.2 r3-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:*19.2 r3-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*19.3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*19.3 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*19.3 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*19.3 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*19.3 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*19.3 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*19.3 r2-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*19.3 r2-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*19.3 r2-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*19.3 r2-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*19.3 r3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*19.3 r3-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*19.3 r3-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*19.3 r3-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*19.4 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*19.4 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*19.4 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*19.4 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*19.4 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*19.4 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*19.4 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*19.4 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*19.4 r2-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*19.4 r2-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*19.4 r2-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*19.4 r3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*19.4 r3-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*19.4 r3-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*19.4 r3-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*19.4 r3-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*19.4 r3-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*19.4 r3-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*20.1 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*20.1 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*20.1 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*20.1 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*20.1 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*20.1 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*20.1 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*20.2 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*20.2 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*20.2 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*20.2 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*20.2 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*20.2 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*20.2 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*20.2 r2-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*20.3 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*20.3 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*20.3 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*20.4 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*20.4 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*21.1 r1VulnerableJuniper
  • cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:* Versions 18.4 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:* Versions 18.4 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:* Versions 18.4 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:* Versions 18.4 r2-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:* Versions 18.4 r2-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:* Versions 18.4 r2-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:* Versions 18.4 r2-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s7:*:*:*:*:*:* Versions 18.4 r2-s7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s8:*:*:*:*:*:* Versions 18.4 r2-s8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:* Versions 18.4 r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:* Versions 18.4 r3-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:* Versions 18.4 r3-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:* Versions 18.4 r3-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:* Versions 18.4 r3-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:* Versions 18.4 r3-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:* Versions 18.4 r3-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3-s7:*:*:*:*:*:* Versions 18.4 r3-s7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r3-s8:*:*:*:*:*:* Versions 18.4 r3-s8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:* Versions 19.1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:* Versions 19.1 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:* Versions 19.1 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:* Versions 19.1 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:* Versions 19.1 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:* Versions 19.1 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:* Versions 19.1 r1-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:* Versions 19.1 r1-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:* Versions 19.1 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:* Versions 19.1 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:* Versions 19.1 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:* Versions 19.1 r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:* Versions 19.1 r3-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:* Versions 19.1 r3-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:* Versions 19.1 r3-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:* Versions 19.1 r3-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r3-s5:*:*:*:*:*:* Versions 19.1 r3-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r3-s6:*:*:*:*:*:* Versions 19.1 r3-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:* Versions 19.2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:* Versions 19.2 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:* Versions 19.2 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:* Versions 19.2 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:* Versions 19.2 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:* Versions 19.2 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:* Versions 19.2 r1-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:* Versions 19.2 r1-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:* Versions 19.2 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:* Versions 19.2 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:* Versions 19.2 r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:* Versions 19.2 r3-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:* Versions 19.2 r3-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:* Versions 19.3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:* Versions 19.3 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:* Versions 19.3 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:* Versions 19.3 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:* Versions 19.3 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:* Versions 19.3 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:* Versions 19.3 r2-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:* Versions 19.3 r2-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:* Versions 19.3 r2-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:* Versions 19.3 r2-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:* Versions 19.3 r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:* Versions 19.3 r3-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:* Versions 19.3 r3-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:* Versions 19.3 r3-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:* Versions 19.4 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:* Versions 19.4 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:* Versions 19.4 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:* Versions 19.4 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:* Versions 19.4 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:* Versions 19.4 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:* Versions 19.4 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:* Versions 19.4 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:* Versions 19.4 r2-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:* Versions 19.4 r2-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:* Versions 19.4 r2-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:* Versions 19.4 r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:* Versions 19.4 r3-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:* Versions 19.4 r3-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:* Versions 19.4 r3-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:* Versions 19.4 r3-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:* Versions 19.4 r3-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:* Versions 19.4 r3-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:* Versions 20.1 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:* Versions 20.1 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:* Versions 20.1 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:* Versions 20.1 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:* Versions 20.1 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:* Versions 20.1 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:* Versions 20.1 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:* Versions 20.2 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:* Versions 20.2 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:* Versions 20.2 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:* Versions 20.2 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:* Versions 20.2 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:* Versions 20.2 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:* Versions 20.2 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:* Versions 20.2 r2-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:* Versions 20.3 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:* Versions 20.3 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:* Versions 20.3 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:* Versions 20.4 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:* Versions 20.4 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:* Versions 21.1 r1 Vulnerable ·Juniper

Remediation

  • Fix · CNA Junos OS (Juniper Networks) Fixed in 18.4R2-S9, 18.4R3-S9, 19.1R2-S3, 19.1R3-S7, 19.2R1-S7, 19.2R3-S3, 19.3R3-S4, 19.4R3-S7, 20.1R2-S2, 20.1R3, 20.2R3, 20.3R2-S1, 20.3R3, 20.4R2, 21.1R1-S1, 21.1R2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-22156
  2. 2026-10-03 Alias added: GHSA-74x6-4m9v-24wj

References

Exploit 1

  • TI-2023-18638 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01585 Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
  • TI-2025-15550 Junos OS: An local attacker with shell access can execute arbitrary code KEVCVSS 4.0MEDIUM 6.7
  • TI-2023-18644 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files KEVCVSS 3.1MEDIUM 5.3
  • TI-2023-18640 Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files KEVCVSS 3.1MEDIUM 5.3
See all 792 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences