CVE-2021-0289Medium 6.5Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted0.3%
CVE-2021-0288Medium 6.5Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs0.4%
CVE-2021-0287Medium 6.5Junos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network0.4%
CVE-2021-0285High 7.5Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic1.0%
CVE-2021-0283High 7.5Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)1.0%
CVE-2021-0282High 7.5Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled0.9%
CVE-2021-0281Medium 5.9Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI0.8%
CVE-2021-0280High 7.5Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine1.0%
CVE-2021-0278High 8.8Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.0.9%
CVE-2021-0277High 8.8Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd0.7%
CVE-2021-0275High 8.8Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.1.2%
CVE-2021-0273Medium 5.3Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.1.0%
CVE-2021-0272Medium 6.5Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.0.4%
CVE-2021-0271Medium 6.5Junos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core.0.4%
CVE-2021-0270High 7.5Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment0.7%
CVE-2021-0269High 8.8Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.0.9%
CVE-2021-0268High 8.8Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.0.9%
CVE-2021-0267High 7.4Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.0.5%
CVE-2021-0266High 8.1cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.0.9%
CVE-2021-0264Medium 5.9Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured1.0%
CVE-2021-0263Medium 5.9Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled0.9%
CVE-2021-0262Medium 6.5Junos OS: QFX10002-60C: Use after free vulnerability found during static code analysis0.4%
CVE-2021-0261High 7.5Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests1.1%
CVE-2021-0260High 7.3Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.0.9%
CVE-2021-0259High 7.4Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario0.4%
CVE-2021-0258Medium 5.9Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface0.6%
CVE-2021-0257Medium 6.5Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface0.4%
CVE-2021-0256Medium 5.5Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries0.2%
CVE-2021-0255Medium 5.5Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries0.2%
CVE-2021-0254Critical 9.8Junos OS: Remote code execution vulnerability in overlayd service2.6%
CVE-2021-0253High 7.8Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation0.5%
CVE-2021-0252High 7.8Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation0.5%
CVE-2021-0251High 8.6Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets1.1%
CVE-2021-0250High 7.5Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD1.0%
CVE-2021-0249High 8.1Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.1.8%
CVE-2021-0248Critical 10.0NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.1.0%
CVE-2021-0247Medium 5.1Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.0.6%
CVE-2021-0246High 7.3Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.0.2%
CVE-2021-0245High 7.8Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.0.2%
CVE-2021-0244High 7.4Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition0.6%
CVE-2021-0242Medium 6.5Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured0.4%
CVE-2021-0241High 7.4Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart0.4%
CVE-2021-0240High 7.4Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.0.4%
CVE-2021-0238Medium 5.5Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space0.2%
CVE-2021-0237Medium 6.5Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration0.4%
CVE-2021-0236Medium 6.5Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.0.8%
CVE-2021-0235High 7.3Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks0.2%
CVE-2021-0234Medium 5.8Junos OS: QFX5100-96S: DDoS protection does not work as expected.0.9%