Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority LOW 39

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or co…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00298 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-120
Priority MEDIUM 44

A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00372 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-121
Priority LOW 31

An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-e…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00268 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-770
Priority MEDIUM 40

A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges v…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.0035 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-121
Priority MEDIUM 49

An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitrary Junos commands with root privileges via the expos…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0075 Published 2026-10-14 Fixed in 25.2R2-S2, 25.4R1-S3 +1 CWE-287
Priority MEDIUM 46

An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00471 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-191
Priority MEDIUM 40

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.0035 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-121
Priority MEDIUM 46

A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00461 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-617
Priority MEDIUM 44

A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00356 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-476
Priority LOW 31

An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00411 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-409
Priority MEDIUM 40

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibl…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00429 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-122