juniper junos 12.1x46 vulnerabilities and exploits

(subscribe to this query)

5.8

CVSSv2

Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data channel. These related sessions (gates) are specific to source and destination IPs and ports of client and server. The design intent...

Juniper Junos 12.1x44 Juniper Junos 12.1x46 Juniper Junos 12.1x46-d10 Juniper Junos 12.1x47 Juniper Junos 12.3x48 Juniper Junos 15.1x49

4.3

CVSSv2

On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules, leading to information disclosure which an attacker may use to gain control of the target device or other internal devices, systems or ser...

Juniper Junos 12.1x46 Juniper Junos 12.3x48 Juniper Junos 15.1x49

4.3

CVSSv2

When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at risk that these credentials may be captured during follow-on HTTP/HTTPS requests by a malicious acto...

Juniper Junos 12.1x46 Juniper Junos 12.3x48 Juniper Junos 15.1x49

5

CVSSv2

An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected...

Juniper Junos 12.1x46 Juniper Junos 12.3x48 Juniper Junos 15.1x49

1 Article

7.2

CVSSv2

The Juniper SRX Series services gateways with Junos OS 12.1X46 prior to 12.1X46-D35, 12.1X47 prior to 12.1X47-D25, and 12.3X48 prior to 12.3X48-D15 do not properly implement the "set system ports console insecure" feature, which allows physically proximate malicious use...

Juniper Junos 12.1x46 Juniper Junos 12.1x47 Juniper Junos 12.3x48

5

CVSSv2

When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect password can trigger a lockout of the root account. When an SRX Series device is in cluster mode, and a cluster sync or ...

Juniper Junos 12.1x46 Juniper Junos 12.3x48 Juniper Junos 15.1x49

5

CVSSv2

On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic from flowing through the device(s). Repeated crashes of the flowd process may constitute an extended den...

Juniper Junos 15.1x49 Juniper Junos 12.1x46 Juniper Junos 12.3x48

4.3

CVSSv2

On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is c...

Juniper Junos 12.1x46 Juniper Junos 12.3x48 Juniper Junos 15.1x49

5.8

CVSSv2

Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle malicious user to inject bogus signatures to cause service disruptions or make the device not detect certain types ...

Juniper Junos 12.1x46 Juniper Junos 12.3x48 Juniper Junos 15.1x49

5

CVSSv2

Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of S...

Juniper Junos 12.3x48 Juniper Junos 12.1x46 Juniper Junos 15.1x49

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook