JO
Product
Junos OS Evolved
248
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 95Medium 151Low 0
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21604 | 7.5 | Jan 12 | An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21602 | 7.5 | Jan 12 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based attacker to cause a… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +26 more |
| CVE-2023-44197 | 7.5 | Oct 13 | An Out-of-Bounds Write vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44185 | 7.5 | Oct 13 | An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of Service (DoS )to the device upon… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44175 | 7.5 | Oct 12 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the… Affected: 22.3; 22.3; 22.3; 22.3; 22.3; 22.4; +4 more |
| CVE-2023-44186 | 7.5 | Oct 11 | An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-4481 | 7.5 | Sep 1 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-0026 | 7.5 | Jun 21 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-28982 | 7.5 | Apr 17 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Affected: 20.3; 20.3; 20.3; 20.3; 20.3; 20.4; +23 more |
| CVE-2023-28967 | 7.5 | Apr 17 | A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.1; +34 more |
| CVE-2023-28964 | 7.5 | Apr 17 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network based,… Affected: before 20.1; 20.1; 20.1; 20.1; 20.1; 20.1; +12 more |
| CVE-2023-22401 | 7.5 | Jan 13 | An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 21.3; 21.4; 21.4; 22.1; 22.2; 22.2 |
| CVE-2023-22400 | 7.5 | Jan 13 | An Uncontrolled Resource Consumption vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +31 more |
| CVE-2023-22393 | 7.5 | Jan 13 | An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +3 more |
| CVE-2022-22184 | 7.5 | Dec 22 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker… Affected: 22.3 |
| CVE-2022-22247 | 7.5 | Oct 18 | Junos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS) Affected: 21.3; 21.3; 21.3; 21.3; 21.4; 21.4; +2 more |
| CVE-2022-22211 | 7.5 | Oct 18 | Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2022-22192 | 7.5 | Oct 18 | Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +19 more |
| CVE-2022-22212 | 7.5 | Jul 20 | An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows unauthenticated network… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +4 more |
| CVE-2022-22197 | 7.5 | Apr 14 | An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 20.1; 20.1; 20.1; 20.1; 20.1; 20.1; +11 more |
| CVE-2022-22195 | 7.5 | Apr 14 | An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a counter… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +11 more |
| CVE-2022-22194 | 7.5 | Apr 14 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allows an… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +1 more |
| CVE-2022-22183 | 7.5 | Apr 14 | An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker who is able to connect to a specific open IPv4 port,… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +17 more |
| CVE-2022-22177 | 7.5 | Jan 19 | A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +2 more |
| CVE-2021-31383 | 7.5 | Oct 19 | In Point to MultiPoint (P2MP) scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined… Affected: 20.1; 20.1; 20.1; 20.1; 20.1; 20.1; +13 more |
| CVE-2021-31374 | 7.5 | Oct 19 | On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (RPD) crash and… Affected: 20.3; 20.3; 20.3; 20.3; 20.3 |
| CVE-2021-31353 | 7.5 | Oct 19 | An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specific BGP update, causing the… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +5 more |
| CVE-2021-0286 | 7.5 | Jul 15 | A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially crafted packets to the device, causing… Affected: 19.2; 19.2; 19.3; 19.3; 19.4; 19.4; +9 more |
| CVE-2021-0264 | 7.5 | Apr 22 | A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed,… Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +8 more |
| CVE-2021-0250 | 7.5 | Apr 22 | In segment routing traffic engineering (SRTE) environments where the BGP Monitoring Protocol (BMP) feature is enable, a vulnerability in the Routing Protocol Daemon (RPD) process… Affected: 19.2 |
| CVE-2021-0226 | 7.5 | Apr 22 | On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS)… Affected: 20.1; 20.1; 20.1; 20.1; 20.1; 20.2; +4 more |
| CVE-2020-1648 | 7.5 | Jul 17 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart Affected: 19.4; 19.4; 19.4; 20.1 |
| CVE-2020-1646 | 7.5 | Jul 17 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon (RPD) crash and restart Affected: 19.2 |
| CVE-2020-1644 | 7.5 | Jul 17 | On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time… Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +2 more |
| CVE-2020-1638 | 7.5 | Apr 8 | The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet Affected: 19.2; 19.3; 19.4 |
| CVE-2020-1626 | 7.5 | Apr 8 | A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting… Affected: 18.3 |
| CVE-2026-33797 | 7.4 | Apr 9 | Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset Affected: 25.2; 25.2; 25.2; 25.2 |
| CVE-2025-59960 | 7.4 | Jan 15 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a DHCP client… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2025-30648 | 7.4 | Apr 9 | An Improper Input Validation vulnerability in the Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to… Affected: 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +25 more |
| CVE-2021-0259 | 7.4 | Apr 22 | Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instability might be experienced in… Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +6 more |
| CVE-2026-57028 | 7.3 | Jul 9 | Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker Affected: before 23.2; 23.2; 23.2; 23.2; 23.2 |
| CVE-2024-39546 | 7.3 | Jul 11 | A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an authenticated, low-privilege local… Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +34 more |
| CVE-2022-22248 | 7.3 | Oct 18 | Junos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commands Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +19 more |
| CVE-2026-21908 | 7.1 | Jan 15 | A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated,… Affected: 23.2; 23.2; 23.2; 23.2; 23.4; 23.4; +19 more |
| CVE-2023-28973 | 7.1 | Apr 17 | An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a local, authenticated attacker to execute administrative… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +29 more |
| CVE-2021-31360 | 7.1 | Oct 19 | An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved command-line interpreter (CLI) allows a low-privileged user to overwrite local… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +5 more |
| CVE-2024-39556 | 7.0 | Jul 10 | A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2026-33791 | 6.7 | Apr 9 | Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2025-52988 | 6.7 | Jul 11 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a… Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +17 more |
| CVE-2024-47495 | 6.7 | Oct 11 | An Authorization Bypass Through User-Controlled Key vulnerability allows a locally authenticated attacker with shell access to gain full control of the device when Dual Routing… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |