Juniper Networks, Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Junos OS | 2 | – | Jul 10, 2024 |
| cRPD | 1 | – | Apr 12, 2024 |
| Juniper Cloud Native Router (JCNR) | 1 | – | Apr 12, 2024 |
| Junos OS Evolved | 1 | – | Aug 31, 2023 |
Exploited and recent CVEs
- CVE-2024-39565 Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device. 0.5%
- CVE-2024-30407 [Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks 0.7%
- CVE-2024-30407 [Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks 0.7%
- CVE-2023-4481 Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481) 18.4%
- CVE-2023-4481 Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481) 18.4%