Vulnerabilities > Juniper > Junos OS Evolved > High

DATE CVE VULNERABILITY TITLE RISK
2022-10-18 CVE-2022-22211 Allocation of Resources Without Limits or Throttling vulnerability in Juniper Junos OS Evolved
A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to cause Denial of Service (DoS).
network
low complexity
juniper CWE-770
7.5
2022-10-18 CVE-2022-22239 Improper Privilege Management vulnerability in Juniper Junos OS Evolved
An Execution with Unnecessary Privileges vulnerability in Management Daemon (mgd) of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate their privileges on the device and potentially remote systems.
local
low complexity
juniper CWE-269
8.8
2022-10-18 CVE-2022-22247 Improper Input Validation vulnerability in Juniper Junos OS Evolved 21.3/21.4/22.1
An Improper Input Validation vulnerability in ingress TCP segment processing of Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker to send a crafted TCP segment to the device, triggering a kernel panic, leading to a Denial of Service (DoS) condition.
network
low complexity
juniper CWE-20
7.5
2022-10-18 CVE-2022-22248 Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Junos OS Evolved
An Incorrect Permission Assignment vulnerability in shell processing of Juniper Networks Junos OS Evolved allows a low-privileged local user to modify the contents of a configuration file which could cause another user to execute arbitrary commands within the context of the follow-on user's session.
local
low complexity
juniper CWE-732
7.3
2022-07-20 CVE-2022-22212 Allocation of Resources Without Limits or Throttling vulnerability in Juniper Junos OS Evolved 21.2/21.3
An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows unauthenticated network based attacker to cause a Denial of Service (DoS).
network
low complexity
juniper CWE-770
7.5
2022-04-14 CVE-2022-22183 Unspecified vulnerability in Juniper Junos OS Evolved
An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker who is able to connect to a specific open IPv4 port, which in affected releases should otherwise be unreachable, to cause the CPU to consume all resources as more traffic is sent to the port to create a Denial of Service (DoS) condition.
network
low complexity
juniper
7.5
2022-04-14 CVE-2022-22194 Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper Junos OS Evolved
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).
network
low complexity
juniper CWE-754
7.5
2022-04-14 CVE-2022-22195 Improper Update of Reference Count vulnerability in Juniper Junos OS Evolved
An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a counter overflow, eventually causing a Denial of Service (DoS).
network
low complexity
juniper CWE-911
7.5
2022-04-14 CVE-2022-22197 Operation on a Resource after Expiration or Release vulnerability in Juniper Junos and Junos OS Evolved
An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker with an established BGP session to cause a Denial of Service (DoS).
network
low complexity
juniper CWE-672
7.5
2022-01-19 CVE-2022-22177 Improper Handling of Exceptional Conditions vulnerability in Juniper Junos 12.3/15.1/18.3
A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service (DoS) to the service until it is manually restarted.
network
low complexity
juniper CWE-755
7.5