CVE-2025-21601High 7.5Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device0.4%
CVE-2025-21597Medium 5.3Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed0.3%
CVE-2025-21595Medium 6.5Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash0.3%
CVE-2025-21594High 7.5Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block0.4%
CVE-2025-21591High 7.4Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash0.3%
CVE-2024-39564High 7.5Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash0.4%
CVE-2025-21598High 7.5Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash0.7%
CVE-2025-21600Medium 6.5Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash0.3%
CVE-2025-21602Medium 6.5Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash0.2%
CVE-2025-21596Medium 5.5Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash0.2%
CVE-2025-21593Medium 6.5Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash0.2%
CVE-2025-21592Medium 5.5Junos OS: SRX Series: Low privileged user able to access highly sensitive information on file system0.2%
CVE-2024-47507Medium 5.8Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted0.3%
CVE-2024-47506Medium 5.9Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash0.3%
CVE-2024-47504High 7.5Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash0.6%
CVE-2024-47503Medium 6.5Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash0.3%
CVE-2024-47501Medium 5.5Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash0.2%
CVE-2024-47499High 7.5Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash0.6%
CVE-2024-47497High 7.5Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion0.6%
CVE-2024-47496Medium 5.5Junos OS: MX Series: The PFE will crash on running specific command0.2%
CVE-2024-47494Medium 5.9Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset0.4%
CVE-2024-47493Medium 6.5Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash0.4%
CVE-2024-47491Medium 5.9Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash0.6%
CVE-2024-39547High 7.5Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization1.0%
CVE-2024-39527Medium 5.5Junos OS: SRX Series: Low privileged user able to access sensitive information on file system0.2%
CVE-2024-39526Medium 6.5Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets0.4%
CVE-2024-39525High 7.5Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash0.4%
CVE-2024-39516High 7.5Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash0.4%
CVE-2024-39515High 7.5Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash0.5%
CVE-2024-39552High 7.5Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash0.6%
CVE-2024-39551High 7.5Junos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop0.5%
CVE-2024-39550Medium 6.5Junos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service0.3%
CVE-2024-39549High 7.5Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak0.5%
CVE-2024-39545High 7.5Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash0.5%
CVE-2024-39543Medium 6.5Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash0.3%
CVE-2024-39542High 7.5Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash0.5%
CVE-2024-39541Medium 6.5Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash0.3%
CVE-2024-39540High 7.5Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash0.5%
CVE-2024-39539Medium 5.3Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash0.2%
CVE-2024-39536Medium 5.3Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak0.2%
CVE-2024-39533Medium 5.8Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used0.3%
CVE-2024-39532Medium 6.3Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user0.2%
CVE-2024-39530High 7.5Junos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash0.5%
CVE-2024-39529High 7.5Junos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash0.5%
CVE-2024-39528Medium 5.7Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash0.3%
CVE-2024-39518High 7.5Junos OS: MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry Interface0.4%
CVE-2024-39517Medium 6.5Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured0.2%
CVE-2024-39514Medium 6.5Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash0.2%
CVE-2024-39511Medium 5.5Junos OS: The 802.1X Authentication Daemon crashes on running a specific command0.1%
CVE-2024-39561Medium 5.8Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path0.3%