CVE-2023-28964High 7.5Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash0.6%
CVE-2023-28965Medium 6.5Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service0.6%
CVE-2023-28974High 7.4Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash0.3%
CVE-2023-28968Medium 5.3Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open0.6%
CVE-2023-28975Medium 4.6Junos OS: The kernel will crash when certain USB devices are inserted0.3%
CVE-2023-28981Medium 6.5Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash0.3%
CVE-2023-28962Medium 5.3Junos OS: Unauthenticated access vulnerability in J-Web0.6%
CVE-2023-28959Medium 6.5Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets0.3%
CVE-2023-22409Medium 5.5Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot0.2%
CVE-2023-22408High 7.5Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash0.6%
CVE-2023-22393High 7.5Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop 0.6%
CVE-2023-22416High 7.5Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received0.7%
CVE-2023-22414Medium 6.5Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed0.3%
CVE-2023-22404Medium 6.5Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received0.6%
CVE-2023-22403High 7.5Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic0.7%
CVE-2023-22413High 7.5Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets0.7%
CVE-2023-22391High 7.5Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)0.6%
CVE-2023-22406Medium 6.5Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF0.3%
CVE-2023-22405Medium 6.5Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot0.3%
CVE-2023-22410High 7.5Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.0.8%
CVE-2023-22401High 7.5Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash0.6%
CVE-2023-22411High 7.5Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device0.6%
CVE-2023-22399High 7.5Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled0.7%
CVE-2023-22407Medium 6.5Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router0.3%
CVE-2023-22395Medium 6.5Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity0.3%
CVE-2023-22396High 7.5Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)0.6%
CVE-2023-22412High 7.5Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed0.5%
CVE-2023-22415High 7.5Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received0.8%
CVE-2023-22394High 7.5Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls 0.6%
CVE-2023-22398Medium 5.3Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs0.2%
CVE-2023-22417High 7.5Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash0.7%
CVE-2022-22184High 7.5Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R10.7%
CVE-2022-22251High 7.8cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges0.2%
CVE-2022-22250Medium 6.5Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote0.3%
CVE-2022-22249Medium 6.5Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain0.5%
CVE-2022-22246High 7.5Junos OS: PHP file inclusion vulnerability in J-Web0.8%
CVE-2022-22245Medium 4.3Junos OS: Path traversal vulnerability in J-Web0.8%
CVE-2022-22244Medium 5.3Junos OS: Unauthenticated XPath Injection vulnerability in J-Web0.6%
CVE-2022-22243Medium 4.3Junos OS: XPath Injection vulnerability in J-Web0.5%
CVE-2022-22242Medium 6.1Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web3.4%
CVE-2022-22241High 8.1Junos OS: Vulnerability in J-Web may allow deserialization without authentication1.3%
CVE-2022-22240Medium 5.5Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario0.2%
CVE-2022-22238Medium 5.3Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed0.3%
CVE-2022-22237Medium 6.5Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally0.5%
CVE-2022-22236High 7.5Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash0.7%
CVE-2022-22235Medium 5.9Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed0.7%
CVE-2022-22234Medium 5.5Junos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busy0.2%
CVE-2022-22233Medium 5.5Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash0.2%
CVE-2022-22232High 7.5SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash0.7%
CVE-2022-22231High 7.5SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash0.7%