Vulnerabilidades em Juniper Networks

915 resultados
Análise Vexday

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2016-4925HIGHJUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packetEPSS 2.7%CVE-2020-1647CRITICALJunos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabledEPSS 2.6%CVE-2021-0254CRITICALJunos OS: Remote code execution vulnerability in overlayd serviceEPSS 2.6%CVE-2021-0265HIGHContrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root.EPSS 2.5%CVE-2022-22242MEDIUMJunos OS: Cross-site Scripting (XSS) vulnerability in J-WebEPSS 2.5%CVE-2017-2315—On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered tEPSS 2.5%CVE-2017-10615CRITICALJunos: Potential remote code execution vulnerability in PAMEPSS 2.5%CVE-2018-0027HIGHJunos OS: Receipt of malformed RSVP packet may lead to RPD denial of serviceEPSS 2.4%CVE-2018-0030HIGHJunos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.EPSS 2.4%CVE-2019-0002MEDIUMJunos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effectEPSS 2.4%CVE-2018-0022HIGHJunos OS: Mbuf leak due to processing MPLS packets in VPLS network.EPSS 2.3%CVE-2021-0276CRITICALSteel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.EPSS 2.3%CVE-2018-0050HIGHJunos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.EPSS 2.3%CVE-2018-0062MEDIUMJunos OS: Denial of Service in J-WebEPSS 2.3%CVE-2016-1265CRITICALJunos Space: privilege escalation vulnerabilities in Junos SpaceEPSS 2.3%CVE-2017-2349CRITICALSRX Series: Command injection vulnerability in SRX IDP feature.EPSS 2.3%CVE-2017-10617MEDIUMContrail: XML External Entity (XXE) vulnerabilityEPSS 2.3%CVE-2018-0061MEDIUMJunos OS: Denial of service in telnetdEPSS 2.3%CVE-2017-2313—Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd EPSS 2.3%CVE-2017-2332—An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may EPSS 2.3%