Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

juniper junos 16.1 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2020-10188
utility.c in telnetd in netkit telnet up to and including 0.17 allows remote malicious users to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
Netkit Telnet Project Netkit TelnetFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 8.0Debian Debian Linux 9.0Arista EosArista Eos 4.24.0fOracle Communications Performance Intelligence Center 10.4.0.2Juniper Junos 15.1x49Juniper Junos 15.1Juniper Junos 16.1Juniper Junos 12.3Juniper Junos 15.1x49-d30Juniper Junos 12.3x48Juniper Junos 12.3x50Juniper Junos 17.2Juniper Junos 17.3Juniper Junos 17.4Juniper Junos 18.1Juniper Junos 18.2Juniper Junos 18.3
10
CVSSv2
CVE-2018-0007
An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through a local segment broadcast, may be able to cause a Junos device to enter an improper boundary check condition allowing a memory corruption to occur, leading to a ...
Juniper Junos 12.1x46Juniper Junos 12.3Juniper Junos 12.3x48Juniper Junos 14.1Juniper Junos 14.1x53Juniper Junos 14.2Juniper Junos 15.1Juniper Junos 15.1x49Juniper Junos 15.1x53Juniper Junos 16.1Juniper Junos 16.1x65Juniper Junos 16.2Juniper Junos 17.1
10
CVSSv2
CVE-2017-10622
An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based malicious user to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch...
Juniper Junos Space 17.1Juniper Junos Space 16.1
9.3
CVSSv2
CVE-2021-0275
A Cross-site Scripting (XSS) vulnerability in J-Web on Juniper Networks Junos OS allows an malicious user to target another user's session thereby gaining access to the users session. The other user session must be active for the attack to succeed. Once successful, the attac...
Juniper Junos 12.3Juniper Junos 15.1Juniper Junos 12.3x48Juniper Junos 15.1x49Juniper Junos 16.1Juniper Junos 16.2Juniper Junos 17.1Juniper Junos 17.2Juniper Junos 17.3Juniper Junos 17.4Juniper Junos 18.1Juniper Junos 18.2Juniper Junos 18.3Juniper Junos 18.4Juniper Junos 19.1Juniper Junos 19.2Juniper Junos 19.3
9.3
CVSSv2
CVE-2018-0052
If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can obtain root access to the device. RSH service is disabled by default on Junos. There is no documented CLI command to enable this service. However, an undocumente...
Juniper Junos 12.1x46Juniper Junos 12.3Juniper Junos 12.3x48Juniper Junos 14.1x53Juniper Junos 15.1Juniper Junos 15.1x49Juniper Junos 15.1x53Juniper Junos 16.1Juniper Junos 16.2Juniper Junos 17.1Juniper Junos 17.2Juniper Junos 17.2x75Juniper Junos 17.3Juniper Junos 17.4Juniper Junos 18.2x75
8.3
CVSSv2
CVE-2020-1605
When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may then arbitrarily execute commands as root on ...
Juniper Junos 15.1Juniper Junos 15.1x49Juniper Junos 15.1x53Juniper Junos 16.1Juniper Junos 16.2Juniper Junos 17.1Juniper Junos 17.2Juniper Junos 17.3Juniper Junos 17.4Juniper Junos 18.1Juniper Junos 18.2Juniper Junos 18.2x75Juniper Junos 18.3Juniper Junos 18.4Juniper Junos 19.1Juniper Junos 19.2
8.3
CVSSv2
CVE-2020-1602
When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may remotely take over the code execution of the ...
Juniper Junos 15.1Juniper Junos 15.1x49Juniper Junos 15.1x53Juniper Junos 16.1Juniper Junos 16.2Juniper Junos 17.1Juniper Junos 17.2Juniper Junos 17.3Juniper Junos 17.4Juniper Junos 18.1Juniper Junos 18.2Juniper Junos 18.2x75Juniper Junos 18.3Juniper Junos 18.4Juniper Junos 19.1Juniper Junos 19.2
8.3
CVSSv2
CVE-2020-1609
When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on ...
Juniper Junos 15.1Juniper Junos 15.1x49Juniper Junos 15.1x53Juniper Junos 16.1Juniper Junos 16.2Juniper Junos 17.1Juniper Junos 17.2Juniper Junos 17.3Juniper Junos 17.4Juniper Junos 18.1Juniper Junos 18.2Juniper Junos 18.2x75Juniper Junos 18.3Juniper Junos 18.4Juniper Junos 19.1Juniper Junos 19.2
7.8
CVSSv2
CVE-2021-0283
A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an malicious user to send specific sequences of packets to the device thereby causing a Denial of Service (DoS). By repeatedly sending these sequences of packets to the device, an attacker can...
Juniper Junos 17.1Juniper Junos 15.1Juniper Junos 12.3Juniper Junos 16.2Juniper Junos 16.1Juniper Junos 17.2Juniper Junos 17.3Juniper Junos 18.1Juniper Junos 18.2Juniper Junos 18.3Juniper Junos 18.4Juniper Junos 19.1Juniper Junos 19.2Juniper Junos 19.3Juniper Junos 19.4Juniper Junos 20.1Juniper Junos 20.2Juniper Junos 20.3Juniper Junos 20.4Juniper Junos 21.1Juniper Junos 21.2
7.8
CVSSv2
CVE-2020-1632
In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Se...
Juniper Junos 16.1Juniper Junos 16.2Juniper Junos 17.1Juniper Junos 17.2Juniper Junos 17.2x75Juniper Junos 17.3Juniper Junos 17.4Juniper Junos 18.1Juniper Junos 18.1x75Juniper Junos 18.3Juniper Junos 18.4Juniper Junos 19.1Juniper Junos 19.2Juniper Junos Os Evolved 19.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook