JO
Network Security
Junos OS
On CISA KEVExploited in the wild
932
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 393Medium 55Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-60004 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash Affected: 23.4R2-S3 before 23.4R2-S5; 24.2R2 before 24.2R2-S1; 24.4R1 before 24.4R1-S3, 24.4R2 |
| CVE-2025-59964 | 7.5 | Oct 9 | Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart Affected: 24.4 before 24.4R1-S3, 24.4R2 |
| CVE-2025-52981 | 7.5 | Jul 11 | Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S11; 22.2 before 22.2R3-S7; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S4; 23.4 before 23.4R2-S4; +1 more |
| CVE-2025-52980 | 7.5 | Jul 11 | Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message Affected: 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2; 23.2 before 23.2R2; 23.4 before 23.4R2 |
| CVE-2025-52946 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash Affected: before 21.2R3-S9; 21.4; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; +1 more |
| CVE-2025-30660 | 7.5 | Apr 9 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-30659 | 7.5 | Apr 9 | An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated,… Affected: 21.4; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2025-30658 | 7.5 | Apr 9 | A Missing Release of Memory after Effective Lifetime vulnerability in the Anti-Virus processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-30656 | 7.5 | Apr 9 | An Improper Handling of Additional Special Element vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MS-MPC, MS-MIC and SPC3, and… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-30651 | 7.5 | Apr 9 | A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-30649 | 7.5 | Apr 9 | An Improper Input Validation vulnerability in the syslog stream TCP transport of Juniper Networks Junos OS on MX240, MX480 and MX960 devices with MX-SPC3 Security Services Card… Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2025-30645 | 7.5 | Apr 9 | A NULL Pointer Dereference vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker causing specific, valid control traffic to be… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-30644 | 7.5 | Apr 9 | A Heap-based Buffer Overflow vulnerability in the flexible PIC concentrator (FPC) of Juniper Networks Junos OS on EX2300, EX3400, EX4100, EX4300, EX4300MP, EX4400, EX4600,… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2025-21601 | 7.5 | Apr 9 | An Improper Following of Specification by Caller vulnerability in web management (J-Web, Captive Portal, 802.1X, Juniper Secure Connect (JSC) of Juniper Networks Junos OS on SRX… Affected: through 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2025-21594 | 7.5 | Apr 9 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the pfe (packet forwarding engine) of Juniper Networks Junos OS on MX Series causes a port within a pool… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39564 | 7.5 | Feb 5 | This is a similar, but different vulnerability than the issue reported as CVE-2024-39549 Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-21598 | 7.5 | Jan 9 | Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash Affected: 21.2R3-S8 before 21.2R3-S9; 21.4R3-S7 before 21.4R3-S9; 22.2R3-S4 before 22.2R3-S5; 22.3R3-S2 before 22.3R3-S4; 22.4R3 before 22.4R3-S5; 23.2R2 before 23.2R2-S2; +2 more |
| CVE-2024-47504 | 7.5 | Oct 11 | An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine (pfe) Juniper Networks Junos OS on SRX5000 Series allows an unauthenticated,… Affected: 22.1; 22.1; 22.1; 22.1; 22.1; 22.1; +34 more |
| CVE-2024-47499 | 7.5 | Oct 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-47497 | 7.5 | Oct 11 | An Uncontrolled Resource Consumption vulnerability in the http daemon (httpd) of Juniper Networks Junos OS on SRX Series, QFX Series, MX Series and EX Series allows an… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39525 | 7.5 | Oct 9 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39516 | 7.5 | Oct 9 | An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39515 | 7.5 | Oct 9 | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39552 | 7.5 | Jul 11 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network based,… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39551 | 7.5 | Jul 11 | An Uncontrolled Resource Consumption vulnerability in the H.323 ALG (Application Layer Gateway) of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC,… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39549 | 7.5 | Jul 11 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send… Affected: through 21.1; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39545 | 7.5 | Jul 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the the IKE daemon (iked) of Juniper Networks Junos OS on SRX Series, MX Series with SPC3 and NFX350… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39542 | 7.5 | Jul 11 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MPC10/11 or LC9600,… Affected: 21.4; 21.4; 21.4; 21.4; 22.2; 22.2; +3 more |
| CVE-2024-39540 | 7.5 | Jul 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3… Affected: 21.2 |
| CVE-2024-39530 | 7.5 | Jul 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis management daemon (chassisd) of Juniper Networks Junos OS allows an unauthenticated,… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.1; +14 more |
| CVE-2024-39529 | 7.5 | Jul 11 | A Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated,… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39555 | 7.5 | Jul 10 | An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39518 | 7.5 | Jul 10 | A Heap-based Buffer Overflow vulnerability in the telemetry sensor process (sensord) of Juniper Networks Junos OS on MX240, MX480, MX960 platforms using MPC10E causes a steady… Affected: 21.2; 21.2; 21.4; 21.4; 22.2; 22.2; +16 more |
| CVE-2024-21586 | 7.5 | Jul 1 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series and NFX Series allows an… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-30398 | 7.5 | Apr 12 | An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30397 | 7.5 | Apr 12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30392 | 7.5 | Apr 12 | A Stack-based Buffer Overflow vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30382 | 7.5 | Apr 12 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based,… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30405 | 7.5 | Apr 12 | An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000 Series devices using SPC2 line cards while ALGs are enabled allows an attacker sending… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30395 | 7.5 | Apr 12 | An Improper Validation of Specified Type of Input vulnerability in Routing Protocol Daemon (RPD) of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30394 | 7.5 | Apr 12 | A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21598 | 7.5 | Apr 12 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21619 | 7.5 | Jan 25 | A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21616 | 7.5 | Jan 12 | An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21614 | 7.5 | Jan 12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based,… Affected: 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +4 more |
| CVE-2024-21611 | 7.5 | Jan 12 | A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +15 more |
| CVE-2024-21606 | 7.5 | Jan 12 | A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial of… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21597 | 7.5 | Jan 12 | An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21595 | 7.5 | Jan 12 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated… Affected: 21.4; 21.4; 21.4; 21.4; 22.1; 22.1; +16 more |
| CVE-2023-44199 | 7.5 | Oct 13 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based,… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)