Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-44186 (GCVE-0-2023-44186)
Vulnerability from cvelistv5 – Published: 2023-10-11 20:08 – Updated: 2024-12-03 14:49- CWE-755 - Improper Handling of Exceptional Conditions
- Denial of Service (DoS)
| URL | Tags |
|---|---|
| https://supportportal.juniper.net/JSA73150 | vendor-advisory |
| Vendor | Product | Version | |
|---|---|---|---|
| Juniper Networks | Junos OS |
Affected:
0 , < 20.4R3-S8
(semver)
Affected: 21.1R1 , < 21.1* (semver) Affected: 21.2 , < 21.2R3-S6 (semver) Affected: 21.3 , < 21.3R3-S5 (semver) Affected: 21.4 , < 21.4R3-S5 (semver) Affected: 22.1 , < 22.1R3-S4 (semver) Affected: 22.2 , < 22.2R3-S2 (semver) Affected: 22.3 , < 22.3R2-S2, 22.3R3-S1 (semver) Affected: 22.4 , < 22.4R2-S1, 22.4R3 (semver) |
|
| Juniper Networks | Junos OS Evolved |
Affected:
0 , < 20.4R3-S8-EVO
(semver)
Affected: 21.1 , < 21.1*-EVO (semver) Affected: 21.2 , < 21.2R3-S6-EVO (semver) Affected: 21.3 , < 21.3R3-S5-EVO (semver) Affected: 21.4 , < 21.4R3-S5-EVO (semver) Affected: 22.1 , < 22.1R3-S4-EVO (semver) Affected: 22.2 , < 22.2R3-S2-EVO (semver) Affected: 22.3 , < 22.3R2-S2-EVO, 22.3R3-S1-EVO (semver) Affected: 22.4 , < 22.4R2-S1-EVO, 22.4R3-EVO (semver) |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T19:59:51.607Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://supportportal.juniper.net/JSA73150"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-44186",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-06T16:45:50.764805Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-03T14:49:41.755Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"MX Series",
"PTX Series",
"ACX Series",
"EX Series",
"QFX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "20.4R3-S8",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "21.1*",
"status": "affected",
"version": "21.1R1",
"versionType": "semver"
},
{
"lessThan": "21.2R3-S6",
"status": "affected",
"version": "21.2",
"versionType": "semver"
},
{
"lessThan": "21.3R3-S5",
"status": "affected",
"version": "21.3",
"versionType": "semver"
},
{
"lessThan": "21.4R3-S5",
"status": "affected",
"version": "21.4",
"versionType": "semver"
},
{
"lessThan": "22.1R3-S4",
"status": "affected",
"version": "22.1",
"versionType": "semver"
},
{
"lessThan": "22.2R3-S2",
"status": "affected",
"version": "22.2",
"versionType": "semver"
},
{
"lessThan": "22.3R2-S2, 22.3R3-S1",
"status": "affected",
"version": "22.3",
"versionType": "semver"
},
{
"lessThan": "22.4R2-S1, 22.4R3",
"status": "affected",
"version": "22.4",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"PTX Series",
"ACX Series",
"QFX Series"
],
"product": "Junos OS Evolved",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "20.4R3-S8-EVO",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "21.1*-EVO",
"status": "affected",
"version": "21.1",
"versionType": "semver"
},
{
"lessThan": "21.2R3-S6-EVO",
"status": "affected",
"version": "21.2",
"versionType": "semver"
},
{
"lessThan": "21.3R3-S5-EVO",
"status": "affected",
"version": "21.3",
"versionType": "semver"
},
{
"lessThan": "21.4R3-S5-EVO",
"status": "affected",
"version": "21.4",
"versionType": "semver"
},
{
"lessThan": "22.1R3-S4-EVO",
"status": "affected",
"version": "22.1",
"versionType": "semver"
},
{
"lessThan": "22.2R3-S2-EVO",
"status": "affected",
"version": "22.2",
"versionType": "semver"
},
{
"lessThan": "22.3R2-S2-EVO, 22.3R3-S1-EVO",
"status": "affected",
"version": "22.3",
"versionType": "semver"
},
{
"lessThan": "22.4R2-S1-EVO, 22.4R3-EVO",
"status": "affected",
"version": "22.4",
"versionType": "semver"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eNonstop Active Routing is enabled using the following configuration:\u003c/p\u003e \u003ctt\u003e[edit chassis redundancy]\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003egraceful-switchover;\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003e\u003cbr\u003e[edit routing-options]\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003enonstop-routing;\u003c/tt\u003e"
}
],
"value": "Nonstop Active Routing is enabled using the following configuration:\n\n [edit chassis redundancy]\ngraceful-switchover;\n\n[edit routing-options]\nnonstop-routing;"
}
],
"datePublic": "2023-10-11T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\n\n\u003cp\u003eAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\u003c/p\u003e\u003cp\u003eThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\u003c/p\u003eNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\u003cbr\u003e\u003cp\u003eThis issue affects:\u003c/p\u003e\u003cp\u003eJuniper Networks Junos OS:\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions prior to 20.4R3-S8;\u003c/li\u003e\u003cli\u003e21.1 versions 21.1R1 and later;\u003c/li\u003e\u003cli\u003e21.2 versions prior to 21.2R3-S6;\u003c/li\u003e\u003cli\u003e21.3 versions prior to 21.3R3-S5;\u003c/li\u003e\u003cli\u003e21.4 versions prior to 21.4R3-S5;\u003c/li\u003e\u003cli\u003e22.1 versions prior to 22.1R3-S4;\u003c/li\u003e\u003cli\u003e22.2 versions prior to 22.2R3-S2;\u003c/li\u003e\u003cli\u003e22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\u003c/li\u003e\u003cli\u003e22.4 versions prior to 22.4R2-S1, 22.4R3.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eJuniper Networks Junos OS Evolved\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions prior to 20.4R3-S8-EVO;\u003c/li\u003e\u003cli\u003e21.1 versions 21.1R1-EVO and later;\u003c/li\u003e\u003cli\u003e21.2 versions prior to 21.2R3-S6-EVO;\u003c/li\u003e\u003cli\u003e21.3 versions prior to 21.3R3-S5-EVO;\u003c/li\u003e\u003cli\u003e21.4 versions prior to 21.4R3-S5-EVO;\u003c/li\u003e\u003cli\u003e22.1 versions prior to 22.1R3-S4-EVO;\u003c/li\u003e\u003cli\u003e22.2 versions prior to 22.2R3-S2-EVO;\u003c/li\u003e\u003cli\u003e22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\u003c/li\u003e\u003cli\u003e22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\n\n"
}
],
"value": "\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\n\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\n\nNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\nThis issue affects:\n\nJuniper Networks Junos OS:\n\n\n\n * All versions prior to 20.4R3-S8;\n * 21.1 versions 21.1R1 and later;\n * 21.2 versions prior to 21.2R3-S6;\n * 21.3 versions prior to 21.3R3-S5;\n * 21.4 versions prior to 21.4R3-S5;\n * 22.1 versions prior to 22.1R3-S4;\n * 22.2 versions prior to 22.2R3-S2;\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\n * 22.4 versions prior to 22.4R2-S1, 22.4R3.\n\n\n\n\nJuniper Networks Junos OS Evolved\n\n\n\n * All versions prior to 20.4R3-S8-EVO;\n * 21.1 versions 21.1R1-EVO and later;\n * 21.2 versions prior to 21.2R3-S6-EVO;\n * 21.3 versions prior to 21.3R3-S5-EVO;\n * 21.4 versions prior to 21.4R3-S5-EVO;\n * 22.1 versions prior to 22.1R3-S4-EVO;\n * 22.2 versions prior to 22.2R3-S2-EVO;\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\n\n\n\n\n\n\n"
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eJuniper SIRT is not aware of any malicious exploitation of this vulnerability.\u003c/p\u003e"
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-755",
"description": "CWE-755 Improper Handling of Exceptional Conditions",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"description": "Denial of Service (DoS)",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-05T23:07:57.356Z",
"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"shortName": "juniper"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://supportportal.juniper.net/JSA73150"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe following software releases have been updated to resolve this specific issue: \u003c/p\u003e\u003cp\u003eJunos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S1, 22.4R3, 23.2R1, and all subsequent releases.\u003c/p\u003e\u003cp\u003eJunos OS Evolved: 20.4R3-S8-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S2-EVO, 22.3R2-S2-EVO, 22.3R3-S1-EVO, 22.4R2-S1-EVO, 22.4R3-EVO, 23.2R1-EVO, and all subsequent releases.\u003c/p\u003e"
}
],
"value": "The following software releases have been updated to resolve this specific issue: \n\nJunos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S1, 22.4R3, 23.2R1, and all subsequent releases.\n\nJunos OS Evolved: 20.4R3-S8-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S2-EVO, 22.3R2-S2-EVO, 22.3R3-S1-EVO, 22.4R2-S1-EVO, 22.4R3-EVO, 23.2R1-EVO, and all subsequent releases.\n\n"
}
],
"source": {
"advisory": "JSA73150",
"defect": [
"1736029"
],
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2023-10-11T16:00:00.000Z",
"value": "Initial Publication"
},
{
"lang": "en",
"time": "2023-10-16T16:00:00.000Z",
"value": "Added specific platforms affected and unaffected"
},
{
"lang": "en",
"time": "2024-03-05T17:00:00.000Z",
"value": "Updated affected/fixed releases to convey that 23.2R1 and all subsequent releases are fixed."
}
],
"title": "Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor",
"workarounds": [
{
"lang": "en",
"value": "Current operational and security best practices, such as limiting the AS PATH length, should mitigate risk of this issue.\n\nBelow is an example configuration to limit AS PATH to 30 entries:\n\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 from protocol bgp\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 from as-path 31as\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 then reject\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 then accept\nset groups BASE-POLICY policy-options policy-statement Customer-IN term MaxAS-Limit from policy MaxAS-Limit-30\nset groups BASE-BGP protocols bgp group \u003c*-CUSTOMER\u003e import Customer-IN\nset groups BASE-PREFIX-LISTS policy-options as-path 31as \".{31,}\""
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-av217"
}
}
},
"cveMetadata": {
"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
"assignerShortName": "juniper",
"cveId": "CVE-2023-44186",
"datePublished": "2023-10-11T20:08:26.308Z",
"dateReserved": "2023-09-26T19:30:27.953Z",
"dateUpdated": "2024-12-03T14:49:41.755Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-44186",
"date": "2026-05-27",
"epss": "0.00155",
"percentile": "0.35753"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"20.4\", \"matchCriteriaId\": \"E3A96966-5060-4139-A124-D4E2C879FD6C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"3D361B23-A3C2-444B-BEB8-E231DA950567\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"20DDC6B7-BFC4-4F0B-8E68-442C23765BF2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"037BA01C-3F5C-4503-A633-71765E9EF774\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"C54B047C-4B38-40C0-9855-067DCF7E48BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"38984199-E332-4A9C-A4C0-78083D052E15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"AA6526FB-2941-4D18-9B2E-472AD5A62A53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"09876787-A40A-4340-9C12-8628C325353B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"41615104-C17E-44DA-AB0D-6E2053BD4EF4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"1981DE38-36B5-469D-917E-92717EE3ED53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFA68ACD-AAE5-4577-B734-23AAF77BC85A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"65948ABC-22BB-46D5-8545-0806EDB4B86E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*\", \"matchCriteriaId\": \"283E41CB-9A90-4521-96DC-F31AA592CFD8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*\", \"matchCriteriaId\": \"14EEA504-CBC5-4F6F-889A-D505EC4BB5B1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*\", \"matchCriteriaId\": \"977DEF80-0DB5-4828-97AC-09BB3111D585\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"625BA7E6-D2AD-4A48-9B94-24328BE5B06A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"F462F4E3-762C-429F-8D25-5521100DD37C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"689FE1AE-7A85-4FB6-AB02-E732F23581B6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"79E56DAC-75AD-4C81-9835-634B40C15DA6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"A0040FE2-7ECD-4755-96CE-E899BA298E0C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"076AB086-BB79-4583-AAF7-A5233DFB2F95\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"72E2DDF6-01DF-4880-AB60-B3DA3281E88D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"54010163-0810-4CF5-95FE-7E62BC6CA4F9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C1C3B09-3800-493E-A319-57648305FE6E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*\", \"matchCriteriaId\": \"4BFDCC2B-FAB5-4164-8D70-28E4DFF052AD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"216E7DDE-453D-481F-92E2-9F8466CDDA3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"A52AF794-B36B-43A6-82E9-628658624B0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"3998DC76-F72F-4452-9150-652140B113EB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"36ED4552-2420-45F9-B6E4-6DA2B2B12870\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"C28A14E7-7EA0-4757-9764-E39A27CFDFA5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A43752D-A4AF-4B4E-B95B-192E42883A5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"42986538-E9D0-4C2E-B1C4-A763A4EE451B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"DE22CA01-EA7E-4EE5-B59F-EE100688C1DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"E596ABD9-6ECD-48DC-B770-87B7E62EA345\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"71745D02-D226-44DC-91AD-678C85F5E6FC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"39E44B09-7310-428C-8144-AE9DB0484D1F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"53938295-8999-4316-9DED-88E24D037852\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*\", \"matchCriteriaId\": \"2307BF56-640F-49A8-B060-6ACB0F653A61\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC78A4CB-D617-43FC-BB51-287D2D0C44ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"30FF67F8-1E3C-47A8-8859-709B3614BA6E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C7C507E-C85E-4BC6-A3B0-549516BAB524\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"6514CDE8-35DC-469F-89A3-078684D18F7A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"4624565D-8F59-44A8-B7A8-01AD579745E7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"57E08E70-1AF3-4BA5-9A09-06DFE9663ADE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"255B6F20-D32F-42C1-829C-AE9C7923558A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"90AE30DB-C448-4FE9-AC11-FF0F27CDA227\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"93F324AE-65D3-4CFC-AEAB-898CE1BD05CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"3CCBB2F4-F05B-4CC5-9B1B-ECCB798D0483\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"79ED3CE8-CC57-43AB-9A26-BBC87816062D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"4310D2D9-A8A6-48F8-9384-0A0692A1E1C3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"9962B01C-C57C-4359-9532-676AB81CE8B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"62178549-B679-4902-BFDB-2993803B7FCE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"9AD697DF-9738-4276-94ED-7B9380CD09F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"09FF5818-0803-4646-A386-D7C645EE58A3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"2229FA59-EB24-49A2-85CE-F529A8DE6BA7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"0CB280D8-C5D8-4B51-A879-496ACCDE4538\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F3F54F1-75B3-400D-A735-2C27C8CEBE79\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"0A5B196A-2AF1-4AE5-9148-A75A572807BC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B457616-2D91-4913-9A7D-038BBF8F1F66\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"3F96EBE9-2532-4E35-ABA5-CA68830476A4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"B4D936AE-FD74-4823-A824-2D9F24C25BFB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"E117E493-F4E1-4568-88E3-F243C74A2662\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"01E3E308-FD9C-4686-8C35-8472A0E99F0D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"3683A8F5-EE0E-4936-A005-DF7F6B75DED3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B615DBA-8C53-41D4-B264-D3EED8578471\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"B3124DD0-9E42-4896-9060-CB7DD07FC342\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"44F6FD6C-03AF-4D2C-B411-A753DE12A2DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"D49FFB60-BA71-4902-9404-E67162919ADC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"EFF72FCA-C440-4D43-9BDB-F712DB413717\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"E949B21B-AD62-4022-9088-06313277479E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"8D862E6F-0D01-4B25-8340-888C30F75A2F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F28F73E-8563-41B9-A313-BBAAD5B57A67\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"E37D4694-C80B-475E-AB5B-BB431F59C5E1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5EC0D2D2-4922-4675-8A2C-57A08D7BE334\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EC91F9D-DEDA-46B4-A39F-59A2CDB86C2E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"591AA3E6-62A2-4A1A-A04C-E808F71D8B6E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"786F993E-32CB-492A-A7CC-A7E4F48EA8B9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"19519212-51DD-4448-B115-8A20A40192CC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5CC9909E-AE9F-414D-99B1-83AA04D5297B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDE9E767-4713-4EA2-8D00-1382975A4A15\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"59DDA54E-6845-47EB-AE3C-5EC6BD33DFA7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"574730B0-56C8-4A03-867B-1737148ED9B1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB4C0FBF-8813-44E5-B71A-22CBAA603E2F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"28E42A41-7965-456B-B0AF-9D3229CE4D4C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB1A77D6-D3AD-481B-979C-8F778530B175\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"3A064B6B-A99B-4D8D-A62D-B00C7870BC30\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"40813417-A938-4F74-A419-8C5188A35486\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:23.1:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"0038F142-6F5E-476D-A1EC-E977FD30F155\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B3B2FE1-C228-46BE-AC76-70C2687050AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1B16FF0-900F-4AEE-B670-A537139F6909\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"20.4\", \"matchCriteriaId\": \"0F41A7DF-2B27-4E2E-ABFC-E0510A028199\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"247FB9DF-7EC0-4298-B27C-3235D141C1D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"C9C8866D-162F-4C9B-8167-2FBA25410368\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"F85E5BC7-8607-4330-AA72-2273D32F8604\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"878C81C9-A418-4A21-8FDB-2116A992679C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"7451A671-A3CC-4904-8D45-947B1D3783C9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"0108AD20-EAE6-41D1-AE48-254C46B5388A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"E554FD12-FE69-44D1-B2C9-4382F8CA4456\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"E0C1D53E-70BE-4246-89ED-1074C8C70747\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"B38A90A9-B739-49BE-8845-9ABF846CCC5D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"AAE56A7C-BA26-405F-A640-C43AF78B0A3B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"683D8EED-9F26-41E7-B69C-FE198225A8F2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s5:*:*:*:*:*:*\", \"matchCriteriaId\": \"8979C85C-87DD-42B1-9CCC-BC3F7007C600\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s6:*:*:*:*:*:*\", \"matchCriteriaId\": \"5BDD5111-1BC2-456B-8A31-F2D252DF613C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s7:*:*:*:*:*:*\", \"matchCriteriaId\": \"89B9BF7C-525C-4819-B80D-9B5F240F9878\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"52C3552E-798F-4719-B38D-F74E34EAAA40\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE674DD3-3590-4434-B144-5AD7EB5F039D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"0099BDA9-9D4B-4D6C-8234-EFD9E8C63476\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"D8729BC1-FB09-4E6D-A5D5-8BDC589555B6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D72C3DF-4513-48AC-AAED-C1AADF0794E1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C583289-96C4-4451-A320-14CA1C390819\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA43782E-0719-496E-9237-E1ABD3C4C664\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"78897DD2-E161-4191-94FF-7400FB612DF5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"620B0CDD-5566-472E-B96A-31D2C12E3120\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"7E1E57AF-979B-4022-8AD6-B3558E06B718\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"144730FB-7622-4B3D-9C47-D1B7A7FB7EB0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"7BA246F0-154E-4F44-A97B-690D22FA73DD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"25D6C07C-F96E-4523-BB54-7FEABFE1D1ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B70C784-534B-4FAA-A5ED-3709656E2B97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"60448FFB-568E-4280-9261-ADD65244F31A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B770C52-7E3E-4B92-9138-85DEC56F3B22\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"E88AC378-461C-4EFA-A04B-5786FF21FE03\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B0AFB30-81DC-465C-9F63-D1B15EA4809A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"2035F0AC-29E7-478A-A9D0-BAA3A88B3413\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s5:*:*:*:*:*:*\", \"matchCriteriaId\": \"C34ABD4B-B045-4046-9641-66E3B2082A25\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"4EC38173-44AB-43D5-8C27-CB43AD5E0B2E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5A4DD04A-DE52-46BE-8C34-8DB47F7500F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"FEE0E145-8E1C-446E-90ED-237E3B9CAF47\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F26369D-21B2-4C6A-98C1-492692A61283\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"24003819-1A6B-4BDF-B3DF-34751C137788\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"BF8D332E-9133-45B9-BB07-B33C790F737A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"3E2A4377-D044-4E43-B6CC-B753D7F6ABD4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"8DAEC4F4-5748-4D36-A72B-4C62A0A30E38\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"C76DA7A5-9320-4E21-96A2-ACE70803A1CA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"703C73EB-2D63-4D4F-8129-239AE1E96B2B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F67CE3C-3A06-487C-90DE-D5B3B1EC08A2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E907193-075E-45BC-9257-9607DB790D71\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"CEDF46A8-FC3A-4779-B695-2CA11D045AEB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"39809219-9F87-4583-9DAD-9415DD320B36\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB299492-A919-4EBA-A62A-B3CF02FC0A95\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"74ED0939-D5F8-4334-9838-40F29DE3597F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6937069-8C19-4B01-8415-ED7E9EAE2CE2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"21DF05B8-EF7E-422F-8831-06904160714C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"492FCE45-68A1-4378-85D4-C4034FE0D836\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"522114CC-1505-4205-B4B8-797DE1BD833B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s4:*:*:*:*:*:*\", \"matchCriteriaId\": \"C9D664AB-0FA7-49C7-B6E1-69C77652FBEF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"750FE748-82E7-4419-A061-2DEA26E35309\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"236E23E5-8B04-4081-9D97-7300DF284000\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"5FC96EA7-90A7-4838-B95D-60DBC88C7BC7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"97541867-C52F-40BB-9AAE-7E87ED23D789\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"85CF6664-E35A-4E9B-95C0-CDC91F7F331A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"E048A05D-882F-4B1C-BA32-3BBA3FEA31A3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"47E8D51D-1424-4B07-B036-E3E195F21AC2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"6F3C82ED-5728-406F-ACF6-D7411B0AB6C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s3:*:*:*:*:*:*\", \"matchCriteriaId\": \"1475A58F-1515-4492-B5A3-BE40C30E5B14\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"D77A072D-350A-42F2-8324-7D3AC1711BF9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"83AE395C-A651-4568-88E3-3600544BF799\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"B3BE1FD4-DAD9-4357-A2E9-20E5826B0D5C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"81CC3480-4B65-4588-8D46-FA80A8F6D143\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"F7E76F5F-DB37-4B7F-9247-3CEB4EBD7696\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.2:r3:*:*:*:*:*:*\", \"matchCriteriaId\": \"C63DBEE5-B0C2-498F-A672-B6596C89B0A2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"9370C46D-3AA1-4562-B67F-DF6EA10F209B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.3:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"433631CA-3AC4-4D66-9B46-AEA4209347F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"6E4CD8AD-277A-4FC5-A102-3E151060C216\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"4BC09BAC-83E7-48CE-B571-ED49277B2987\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.3:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA4481D2-F693-48A5-8DBC-E86430987A25\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.3:r2-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"136CA584-2475-4A14-9771-F367180201D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.4:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"93887799-F62C-4A4A-BCF5-004D0B4D4154\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"62C473D2-2612-4480-82D8-8A24D0687BBD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s2:*:*:*:*:*:*\", \"matchCriteriaId\": \"7FB4C5CA-A709-4B13-A9E0-372098A72AD3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:22.4:r2:*:*:*:*:*:*\", \"matchCriteriaId\": \"04CE952D-E3C1-4B34-9E65-EC52BFE887AB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"6DEAA7FD-385F-4221-907E-65ABC16BE4BE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*\", \"matchCriteriaId\": \"DDEC008A-3137-48D1-8ABC-6DB0EFC40E50\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*\", \"matchCriteriaId\": \"558D234D-BC50-415F-86D6-8E19D6C3ACE0\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"\\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\\n\\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\\n\\nNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\\nThis issue affects:\\n\\nJuniper Networks Junos OS:\\n\\n\\n\\n * All versions prior to 20.4R3-S8;\\n * 21.1 versions 21.1R1 and later;\\n * 21.2 versions prior to 21.2R3-S6;\\n * 21.3 versions prior to 21.3R3-S5;\\n * 21.4 versions prior to 21.4R3-S5;\\n * 22.1 versions prior to 22.1R3-S4;\\n * 22.2 versions prior to 22.2R3-S2;\\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\\n * 22.4 versions prior to 22.4R2-S1, 22.4R3.\\n\\n\\n\\n\\nJuniper Networks Junos OS Evolved\\n\\n\\n\\n * All versions prior to 20.4R3-S8-EVO;\\n * 21.1 versions 21.1R1-EVO and later;\\n * 21.2 versions prior to 21.2R3-S6-EVO;\\n * 21.3 versions prior to 21.3R3-S5-EVO;\\n * 21.4 versions prior to 21.4R3-S5-EVO;\\n * 22.1 versions prior to 22.1R3-S4-EVO;\\n * 22.2 versions prior to 22.2R3-S2-EVO;\\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\\n\\n\\n\\n\\n\\n\\n\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad de Improper Handling of Exceptional Conditions en el procesamiento AS PATH de Juniper Networks Junos OS y Junos OS Evolved permite a un atacante enviar un mensaje de actualizaci\\u00f3n de BGP con un AS PATH que contiene una gran cantidad de AS de 4 bytes, lo que lleva a una Denegaci\\u00f3n de Servicio ( DoS). La recepci\\u00f3n y el procesamiento continuo de estas actualizaciones de BGP crear\\u00e1n una condici\\u00f3n sostenida de Denegaci\\u00f3n de Servicio (DoS). Este problema se produce cuando el router tiene habilitado Non-Stop Routing (NSR), tiene un vecino BGP que no es de 4 bytes con capacidad AS, recibe un mensaje de actualizaci\\u00f3n de BGP con un prefijo que incluye un AS PATH largo que contiene una gran cantidad de 4 bytes. AS de bytes y tiene que anunciar el prefijo hacia el vecino BGP que no es compatible con AS de 4 bytes.\\nNota: NSR no es compatible con la serie SRX y, por lo tanto, no se ve afectado por esta vulnerabilidad. \\nEste problema afecta a: \\nJuniper Networks Junos OS: * Todas las versiones anteriores a 20.4R3-S8; * 21.1 versiones 21.1R1 y posteriores; * Versiones 21.2 anteriores a 21.2R3-S6; * Versiones 21.3 anteriores a 21.3R3-S5; * Versiones 21.4 anteriores a 21.4R3-S5; * Versiones 22.1 anteriores a 22.1R3-S4; * Versiones 22.2 anteriores a 22.2R3-S2; * Versiones 22.3 anteriores a 22.3R2-S2, 22.3R3-S1; * Versiones 22.4 anteriores a 22.4R2-S1, 22.4R3; * Versiones 23.2 anteriores a 23.2R2. \\nJuniper Networks Junos OS Evolved * Todas las versiones anteriores a 20.4R3-S8-EVO; * 21.1 versiones 21.1R1-EVO y posteriores; * Versiones 21.2 anteriores a 21.2R3-S6-EVO; * Versiones 21.3 anteriores a 21.3R3-S5-EVO; * Versiones 21.4 anteriores a 21.4R3-S5-EVO; * Versiones 22.1 anteriores a 22.1R3-S4-EVO; * Versiones 22.2 anteriores a 22.2R3-S2-EVO; * Versiones 22.3 anteriores a 22.3R2-S2-EVO, 22.3R3-S1-EVO; * Versiones 22.4 anteriores a 22.4R2-S1-EVO, 22.4R3-EVO; * Versiones 23.2 anteriores a 23.2R2-EVO.\"}]",
"id": "CVE-2023-44186",
"lastModified": "2024-11-21T08:25:23.820",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"sirt@juniper.net\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}]}",
"published": "2023-10-11T21:15:09.890",
"references": "[{\"url\": \"https://supportportal.juniper.net/JSA73150\", \"source\": \"sirt@juniper.net\", \"tags\": [\"Mitigation\", \"Vendor Advisory\"]}, {\"url\": \"https://supportportal.juniper.net/JSA73150\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mitigation\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "sirt@juniper.net",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"sirt@juniper.net\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-755\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-755\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-44186\",\"sourceIdentifier\":\"sirt@juniper.net\",\"published\":\"2023-10-11T21:15:09.890\",\"lastModified\":\"2024-11-21T08:25:23.820\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"\\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\\n\\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\\n\\nNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\\nThis issue affects:\\n\\nJuniper Networks Junos OS:\\n\\n\\n\\n * All versions prior to 20.4R3-S8;\\n * 21.1 versions 21.1R1 and later;\\n * 21.2 versions prior to 21.2R3-S6;\\n * 21.3 versions prior to 21.3R3-S5;\\n * 21.4 versions prior to 21.4R3-S5;\\n * 22.1 versions prior to 22.1R3-S4;\\n * 22.2 versions prior to 22.2R3-S2;\\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\\n * 22.4 versions prior to 22.4R2-S1, 22.4R3.\\n\\n\\n\\n\\nJuniper Networks Junos OS Evolved\\n\\n\\n\\n * All versions prior to 20.4R3-S8-EVO;\\n * 21.1 versions 21.1R1-EVO and later;\\n * 21.2 versions prior to 21.2R3-S6-EVO;\\n * 21.3 versions prior to 21.3R3-S5-EVO;\\n * 21.4 versions prior to 21.4R3-S5-EVO;\\n * 22.1 versions prior to 22.1R3-S4-EVO;\\n * 22.2 versions prior to 22.2R3-S2-EVO;\\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\\n\\n\\n\\n\\n\\n\\n\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de Improper Handling of Exceptional Conditions en el procesamiento AS PATH de Juniper Networks Junos OS y Junos OS Evolved permite a un atacante enviar un mensaje de actualizaci\u00f3n de BGP con un AS PATH que contiene una gran cantidad de AS de 4 bytes, lo que lleva a una Denegaci\u00f3n de Servicio ( DoS). La recepci\u00f3n y el procesamiento continuo de estas actualizaciones de BGP crear\u00e1n una condici\u00f3n sostenida de Denegaci\u00f3n de Servicio (DoS). Este problema se produce cuando el router tiene habilitado Non-Stop Routing (NSR), tiene un vecino BGP que no es de 4 bytes con capacidad AS, recibe un mensaje de actualizaci\u00f3n de BGP con un prefijo que incluye un AS PATH largo que contiene una gran cantidad de 4 bytes. AS de bytes y tiene que anunciar el prefijo hacia el vecino BGP que no es compatible con AS de 4 bytes.\\nNota: NSR no es compatible con la serie SRX y, por lo tanto, no se ve afectado por esta vulnerabilidad. \\nEste problema afecta a: \\nJuniper Networks Junos OS: * Todas las versiones anteriores a 20.4R3-S8; * 21.1 versiones 21.1R1 y posteriores; * Versiones 21.2 anteriores a 21.2R3-S6; * Versiones 21.3 anteriores a 21.3R3-S5; * Versiones 21.4 anteriores a 21.4R3-S5; * Versiones 22.1 anteriores a 22.1R3-S4; * Versiones 22.2 anteriores a 22.2R3-S2; * Versiones 22.3 anteriores a 22.3R2-S2, 22.3R3-S1; * Versiones 22.4 anteriores a 22.4R2-S1, 22.4R3; * Versiones 23.2 anteriores a 23.2R2. \\nJuniper Networks Junos OS Evolved * Todas las versiones anteriores a 20.4R3-S8-EVO; * 21.1 versiones 21.1R1-EVO y posteriores; * Versiones 21.2 anteriores a 21.2R3-S6-EVO; * Versiones 21.3 anteriores a 21.3R3-S5-EVO; * Versiones 21.4 anteriores a 21.4R3-S5-EVO; * Versiones 22.1 anteriores a 22.1R3-S4-EVO; * Versiones 22.2 anteriores a 22.2R3-S2-EVO; * Versiones 22.3 anteriores a 22.3R2-S2-EVO, 22.3R3-S1-EVO; * Versiones 22.4 anteriores a 22.4R2-S1-EVO, 22.4R3-EVO; * Versiones 23.2 anteriores a 23.2R2-EVO.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"sirt@juniper.net\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"sirt@juniper.net\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-755\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-755\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"20.4\",\"matchCriteriaId\":\"E3A96966-5060-4139-A124-D4E2C879FD6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D361B23-A3C2-444B-BEB8-E231DA950567\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"20DDC6B7-BFC4-4F0B-8E68-442C23765BF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"037BA01C-3F5C-4503-A633-71765E9EF774\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C54B047C-4B38-40C0-9855-067DCF7E48BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"38984199-E332-4A9C-A4C0-78083D052E15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA6526FB-2941-4D18-9B2E-472AD5A62A53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"09876787-A40A-4340-9C12-8628C325353B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"41615104-C17E-44DA-AB0D-6E2053BD4EF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"1981DE38-36B5-469D-917E-92717EE3ED53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFA68ACD-AAE5-4577-B734-23AAF77BC85A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"65948ABC-22BB-46D5-8545-0806EDB4B86E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*\",\"matchCriteriaId\":\"283E41CB-9A90-4521-96DC-F31AA592CFD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*\",\"matchCriteriaId\":\"14EEA504-CBC5-4F6F-889A-D505EC4BB5B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*\",\"matchCriteriaId\":\"977DEF80-0DB5-4828-97AC-09BB3111D585\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"625BA7E6-D2AD-4A48-9B94-24328BE5B06A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F462F4E3-762C-429F-8D25-5521100DD37C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"689FE1AE-7A85-4FB6-AB02-E732F23581B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"79E56DAC-75AD-4C81-9835-634B40C15DA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0040FE2-7ECD-4755-96CE-E899BA298E0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"076AB086-BB79-4583-AAF7-A5233DFB2F95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"72E2DDF6-01DF-4880-AB60-B3DA3281E88D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"54010163-0810-4CF5-95FE-7E62BC6CA4F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C1C3B09-3800-493E-A319-57648305FE6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BFDCC2B-FAB5-4164-8D70-28E4DFF052AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"216E7DDE-453D-481F-92E2-9F8466CDDA3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"A52AF794-B36B-43A6-82E9-628658624B0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3998DC76-F72F-4452-9150-652140B113EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"36ED4552-2420-45F9-B6E4-6DA2B2B12870\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C28A14E7-7EA0-4757-9764-E39A27CFDFA5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A43752D-A4AF-4B4E-B95B-192E42883A5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"42986538-E9D0-4C2E-B1C4-A763A4EE451B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE22CA01-EA7E-4EE5-B59F-EE100688C1DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E596ABD9-6ECD-48DC-B770-87B7E62EA345\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"71745D02-D226-44DC-91AD-678C85F5E6FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"39E44B09-7310-428C-8144-AE9DB0484D1F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"53938295-8999-4316-9DED-88E24D037852\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2307BF56-640F-49A8-B060-6ACB0F653A61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC78A4CB-D617-43FC-BB51-287D2D0C44ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"30FF67F8-1E3C-47A8-8859-709B3614BA6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C7C507E-C85E-4BC6-A3B0-549516BAB524\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"6514CDE8-35DC-469F-89A3-078684D18F7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4624565D-8F59-44A8-B7A8-01AD579745E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"57E08E70-1AF3-4BA5-9A09-06DFE9663ADE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"255B6F20-D32F-42C1-829C-AE9C7923558A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"90AE30DB-C448-4FE9-AC11-FF0F27CDA227\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"93F324AE-65D3-4CFC-AEAB-898CE1BD05CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CCBB2F4-F05B-4CC5-9B1B-ECCB798D0483\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"79ED3CE8-CC57-43AB-9A26-BBC87816062D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4310D2D9-A8A6-48F8-9384-0A0692A1E1C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9962B01C-C57C-4359-9532-676AB81CE8B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"62178549-B679-4902-BFDB-2993803B7FCE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"9AD697DF-9738-4276-94ED-7B9380CD09F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"09FF5818-0803-4646-A386-D7C645EE58A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2229FA59-EB24-49A2-85CE-F529A8DE6BA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CB280D8-C5D8-4B51-A879-496ACCDE4538\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F3F54F1-75B3-400D-A735-2C27C8CEBE79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A5B196A-2AF1-4AE5-9148-A75A572807BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B457616-2D91-4913-9A7D-038BBF8F1F66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F96EBE9-2532-4E35-ABA5-CA68830476A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4D936AE-FD74-4823-A824-2D9F24C25BFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"E117E493-F4E1-4568-88E3-F243C74A2662\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"01E3E308-FD9C-4686-8C35-8472A0E99F0D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3683A8F5-EE0E-4936-A005-DF7F6B75DED3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B615DBA-8C53-41D4-B264-D3EED8578471\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3124DD0-9E42-4896-9060-CB7DD07FC342\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"44F6FD6C-03AF-4D2C-B411-A753DE12A2DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D49FFB60-BA71-4902-9404-E67162919ADC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EFF72FCA-C440-4D43-9BDB-F712DB413717\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E949B21B-AD62-4022-9088-06313277479E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D862E6F-0D01-4B25-8340-888C30F75A2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F28F73E-8563-41B9-A313-BBAAD5B57A67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"E37D4694-C80B-475E-AB5B-BB431F59C5E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EC0D2D2-4922-4675-8A2C-57A08D7BE334\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EC91F9D-DEDA-46B4-A39F-59A2CDB86C2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"591AA3E6-62A2-4A1A-A04C-E808F71D8B6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"786F993E-32CB-492A-A7CC-A7E4F48EA8B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"19519212-51DD-4448-B115-8A20A40192CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CC9909E-AE9F-414D-99B1-83AA04D5297B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDE9E767-4713-4EA2-8D00-1382975A4A15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"59DDA54E-6845-47EB-AE3C-5EC6BD33DFA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"574730B0-56C8-4A03-867B-1737148ED9B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB4C0FBF-8813-44E5-B71A-22CBAA603E2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"28E42A41-7965-456B-B0AF-9D3229CE4D4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB1A77D6-D3AD-481B-979C-8F778530B175\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A064B6B-A99B-4D8D-A62D-B00C7870BC30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"40813417-A938-4F74-A419-8C5188A35486\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:23.1:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0038F142-6F5E-476D-A1EC-E977FD30F155\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B3B2FE1-C228-46BE-AC76-70C2687050AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1B16FF0-900F-4AEE-B670-A537139F6909\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"20.4\",\"matchCriteriaId\":\"0F41A7DF-2B27-4E2E-ABFC-E0510A028199\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"247FB9DF-7EC0-4298-B27C-3235D141C1D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9C8866D-162F-4C9B-8167-2FBA25410368\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F85E5BC7-8607-4330-AA72-2273D32F8604\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"878C81C9-A418-4A21-8FDB-2116A992679C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"7451A671-A3CC-4904-8D45-947B1D3783C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0108AD20-EAE6-41D1-AE48-254C46B5388A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E554FD12-FE69-44D1-B2C9-4382F8CA4456\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0C1D53E-70BE-4246-89ED-1074C8C70747\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B38A90A9-B739-49BE-8845-9ABF846CCC5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"AAE56A7C-BA26-405F-A640-C43AF78B0A3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"683D8EED-9F26-41E7-B69C-FE198225A8F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s5:*:*:*:*:*:*\",\"matchCriteriaId\":\"8979C85C-87DD-42B1-9CCC-BC3F7007C600\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s6:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BDD5111-1BC2-456B-8A31-F2D252DF613C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s7:*:*:*:*:*:*\",\"matchCriteriaId\":\"89B9BF7C-525C-4819-B80D-9B5F240F9878\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"52C3552E-798F-4719-B38D-F74E34EAAA40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE674DD3-3590-4434-B144-5AD7EB5F039D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0099BDA9-9D4B-4D6C-8234-EFD9E8C63476\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8729BC1-FB09-4E6D-A5D5-8BDC589555B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D72C3DF-4513-48AC-AAED-C1AADF0794E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C583289-96C4-4451-A320-14CA1C390819\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA43782E-0719-496E-9237-E1ABD3C4C664\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"78897DD2-E161-4191-94FF-7400FB612DF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"620B0CDD-5566-472E-B96A-31D2C12E3120\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E1E57AF-979B-4022-8AD6-B3558E06B718\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"144730FB-7622-4B3D-9C47-D1B7A7FB7EB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BA246F0-154E-4F44-A97B-690D22FA73DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"25D6C07C-F96E-4523-BB54-7FEABFE1D1ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B70C784-534B-4FAA-A5ED-3709656E2B97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"60448FFB-568E-4280-9261-ADD65244F31A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B770C52-7E3E-4B92-9138-85DEC56F3B22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"E88AC378-461C-4EFA-A04B-5786FF21FE03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B0AFB30-81DC-465C-9F63-D1B15EA4809A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"2035F0AC-29E7-478A-A9D0-BAA3A88B3413\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s5:*:*:*:*:*:*\",\"matchCriteriaId\":\"C34ABD4B-B045-4046-9641-66E3B2082A25\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"4EC38173-44AB-43D5-8C27-CB43AD5E0B2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A4DD04A-DE52-46BE-8C34-8DB47F7500F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEE0E145-8E1C-446E-90ED-237E3B9CAF47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F26369D-21B2-4C6A-98C1-492692A61283\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"24003819-1A6B-4BDF-B3DF-34751C137788\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF8D332E-9133-45B9-BB07-B33C790F737A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E2A4377-D044-4E43-B6CC-B753D7F6ABD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DAEC4F4-5748-4D36-A72B-4C62A0A30E38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C76DA7A5-9320-4E21-96A2-ACE70803A1CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"703C73EB-2D63-4D4F-8129-239AE1E96B2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F67CE3C-3A06-487C-90DE-D5B3B1EC08A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E907193-075E-45BC-9257-9607DB790D71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CEDF46A8-FC3A-4779-B695-2CA11D045AEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"39809219-9F87-4583-9DAD-9415DD320B36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB299492-A919-4EBA-A62A-B3CF02FC0A95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"74ED0939-D5F8-4334-9838-40F29DE3597F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6937069-8C19-4B01-8415-ED7E9EAE2CE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"21DF05B8-EF7E-422F-8831-06904160714C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"492FCE45-68A1-4378-85D4-C4034FE0D836\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"522114CC-1505-4205-B4B8-797DE1BD833B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s4:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9D664AB-0FA7-49C7-B6E1-69C77652FBEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"750FE748-82E7-4419-A061-2DEA26E35309\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"236E23E5-8B04-4081-9D97-7300DF284000\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FC96EA7-90A7-4838-B95D-60DBC88C7BC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"97541867-C52F-40BB-9AAE-7E87ED23D789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"85CF6664-E35A-4E9B-95C0-CDC91F7F331A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E048A05D-882F-4B1C-BA32-3BBA3FEA31A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"47E8D51D-1424-4B07-B036-E3E195F21AC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F3C82ED-5728-406F-ACF6-D7411B0AB6C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s3:*:*:*:*:*:*\",\"matchCriteriaId\":\"1475A58F-1515-4492-B5A3-BE40C30E5B14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"D77A072D-350A-42F2-8324-7D3AC1711BF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"83AE395C-A651-4568-88E3-3600544BF799\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3BE1FD4-DAD9-4357-A2E9-20E5826B0D5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"81CC3480-4B65-4588-8D46-FA80A8F6D143\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7E76F5F-DB37-4B7F-9247-3CEB4EBD7696\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.2:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"C63DBEE5-B0C2-498F-A672-B6596C89B0A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9370C46D-3AA1-4562-B67F-DF6EA10F209B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.3:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"433631CA-3AC4-4D66-9B46-AEA4209347F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E4CD8AD-277A-4FC5-A102-3E151060C216\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BC09BAC-83E7-48CE-B571-ED49277B2987\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.3:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA4481D2-F693-48A5-8DBC-E86430987A25\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.3:r2-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"136CA584-2475-4A14-9771-F367180201D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.4:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"93887799-F62C-4A4A-BCF5-004D0B4D4154\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"62C473D2-2612-4480-82D8-8A24D0687BBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s2:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FB4C5CA-A709-4B13-A9E0-372098A72AD3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:22.4:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"04CE952D-E3C1-4B34-9E65-EC52BFE887AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DEAA7FD-385F-4221-907E-65ABC16BE4BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDEC008A-3137-48D1-8ABC-6DB0EFC40E50\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*\",\"matchCriteriaId\":\"558D234D-BC50-415F-86D6-8E19D6C3ACE0\"}]}]}],\"references\":[{\"url\":\"https://supportportal.juniper.net/JSA73150\",\"source\":\"sirt@juniper.net\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://supportportal.juniper.net/JSA73150\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://supportportal.juniper.net/JSA73150\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T19:59:51.607Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-44186\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-03-06T16:45:50.764805Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-12-03T14:49:37.157Z\"}}], \"cna\": {\"title\": \"Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor\", \"source\": {\"defect\": [\"1736029\"], \"advisory\": \"JSA73150\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Juniper Networks\", \"product\": \"Junos OS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"20.4R3-S8\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.1R1\", \"lessThan\": \"21.1*\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.2\", \"lessThan\": \"21.2R3-S6\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.3\", \"lessThan\": \"21.3R3-S5\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.4\", \"lessThan\": \"21.4R3-S5\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.1\", \"lessThan\": \"22.1R3-S4\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.2\", \"lessThan\": \"22.2R3-S2\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.3\", \"lessThan\": \"22.3R2-S2, 22.3R3-S1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.4\", \"lessThan\": \"22.4R2-S1, 22.4R3\", \"versionType\": \"semver\"}], \"platforms\": [\"MX Series\", \"PTX Series\", \"ACX Series\", \"EX Series\", \"QFX Series\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Juniper Networks\", \"product\": \"Junos OS Evolved\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"20.4R3-S8-EVO\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.1\", \"lessThan\": \"21.1*-EVO\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.2\", \"lessThan\": \"21.2R3-S6-EVO\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.3\", \"lessThan\": \"21.3R3-S5-EVO\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"21.4\", \"lessThan\": \"21.4R3-S5-EVO\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.1\", \"lessThan\": \"22.1R3-S4-EVO\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.2\", \"lessThan\": \"22.2R3-S2-EVO\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.3\", \"lessThan\": \"22.3R2-S2-EVO, 22.3R3-S1-EVO\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.4\", \"lessThan\": \"22.4R2-S1-EVO, 22.4R3-EVO\", \"versionType\": \"semver\"}], \"platforms\": [\"PTX Series\", \"ACX Series\", \"QFX Series\"], \"defaultStatus\": \"unaffected\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\\n\\n\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eJuniper SIRT is not aware of any malicious exploitation of this vulnerability.\u003c/p\u003e\", \"base64\": false}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2023-10-11T16:00:00.000Z\", \"value\": \"Initial Publication\"}, {\"lang\": \"en\", \"time\": \"2023-10-16T16:00:00.000Z\", \"value\": \"Added specific platforms affected and unaffected\"}, {\"lang\": \"en\", \"time\": \"2024-03-05T17:00:00.000Z\", \"value\": \"Updated affected/fixed releases to convey that 23.2R1 and all subsequent releases are fixed.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"The following software releases have been updated to resolve this specific issue: \\n\\nJunos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S1, 22.4R3, 23.2R1, and all subsequent releases.\\n\\nJunos OS Evolved: 20.4R3-S8-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S2-EVO, 22.3R2-S2-EVO, 22.3R3-S1-EVO, 22.4R2-S1-EVO, 22.4R3-EVO, 23.2R1-EVO, and all subsequent releases.\\n\\n\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThe following software releases have been updated to resolve this specific issue: \u003c/p\u003e\u003cp\u003eJunos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S1, 22.4R3, 23.2R1, and all subsequent releases.\u003c/p\u003e\u003cp\u003eJunos OS Evolved: 20.4R3-S8-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S2-EVO, 22.3R2-S2-EVO, 22.3R3-S1-EVO, 22.4R2-S1-EVO, 22.4R3-EVO, 23.2R1-EVO, and all subsequent releases.\u003c/p\u003e\", \"base64\": false}]}], \"datePublic\": \"2023-10-11T16:00:00.000Z\", \"references\": [{\"url\": \"https://supportportal.juniper.net/JSA73150\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Current operational and security best practices, such as limiting the AS PATH length, should mitigate risk of this issue.\\n\\nBelow is an example configuration to limit AS PATH to 30 entries:\\n\\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 from protocol bgp\\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 from as-path 31as\\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 then reject\\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 then accept\\nset groups BASE-POLICY policy-options policy-statement Customer-IN term MaxAS-Limit from policy MaxAS-Limit-30\\nset groups BASE-BGP protocols bgp group \u003c*-CUSTOMER\u003e import Customer-IN\\nset groups BASE-PREFIX-LISTS policy-options as-path 31as \\\".{31,}\\\"\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-av217\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"\\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\\n\\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\\n\\nNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\\nThis issue affects:\\n\\nJuniper Networks Junos OS:\\n\\n\\n\\n * All versions prior to 20.4R3-S8;\\n * 21.1 versions 21.1R1 and later;\\n * 21.2 versions prior to 21.2R3-S6;\\n * 21.3 versions prior to 21.3R3-S5;\\n * 21.4 versions prior to 21.4R3-S5;\\n * 22.1 versions prior to 22.1R3-S4;\\n * 22.2 versions prior to 22.2R3-S2;\\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\\n * 22.4 versions prior to 22.4R2-S1, 22.4R3.\\n\\n\\n\\n\\nJuniper Networks Junos OS Evolved\\n\\n\\n\\n * All versions prior to 20.4R3-S8-EVO;\\n * 21.1 versions 21.1R1-EVO and later;\\n * 21.2 versions prior to 21.2R3-S6-EVO;\\n * 21.3 versions prior to 21.3R3-S5-EVO;\\n * 21.4 versions prior to 21.4R3-S5-EVO;\\n * 22.1 versions prior to 22.1R3-S4-EVO;\\n * 22.2 versions prior to 22.2R3-S2-EVO;\\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\\n\\n\\n\\n\\n\\n\\n\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\\n\\n\u003cp\u003eAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\u003c/p\u003e\u003cp\u003eThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\u003c/p\u003eNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\u003cbr\u003e\u003cp\u003eThis issue affects:\u003c/p\u003e\u003cp\u003eJuniper Networks Junos OS:\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions prior to 20.4R3-S8;\u003c/li\u003e\u003cli\u003e21.1 versions 21.1R1 and later;\u003c/li\u003e\u003cli\u003e21.2 versions prior to 21.2R3-S6;\u003c/li\u003e\u003cli\u003e21.3 versions prior to 21.3R3-S5;\u003c/li\u003e\u003cli\u003e21.4 versions prior to 21.4R3-S5;\u003c/li\u003e\u003cli\u003e22.1 versions prior to 22.1R3-S4;\u003c/li\u003e\u003cli\u003e22.2 versions prior to 22.2R3-S2;\u003c/li\u003e\u003cli\u003e22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\u003c/li\u003e\u003cli\u003e22.4 versions prior to 22.4R2-S1, 22.4R3.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eJuniper Networks Junos OS Evolved\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eAll versions prior to 20.4R3-S8-EVO;\u003c/li\u003e\u003cli\u003e21.1 versions 21.1R1-EVO and later;\u003c/li\u003e\u003cli\u003e21.2 versions prior to 21.2R3-S6-EVO;\u003c/li\u003e\u003cli\u003e21.3 versions prior to 21.3R3-S5-EVO;\u003c/li\u003e\u003cli\u003e21.4 versions prior to 21.4R3-S5-EVO;\u003c/li\u003e\u003cli\u003e22.1 versions prior to 22.1R3-S4-EVO;\u003c/li\u003e\u003cli\u003e22.2 versions prior to 22.2R3-S2-EVO;\u003c/li\u003e\u003cli\u003e22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\u003c/li\u003e\u003cli\u003e22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u003c/p\u003e\\n\\n\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-755\", \"description\": \"CWE-755 Improper Handling of Exceptional Conditions\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"description\": \"Denial of Service (DoS)\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"Nonstop Active Routing is enabled using the following configuration:\\n\\n [edit chassis redundancy]\\ngraceful-switchover;\\n\\n[edit routing-options]\\nnonstop-routing;\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eNonstop Active Routing is enabled using the following configuration:\u003c/p\u003e \u003ctt\u003e[edit chassis redundancy]\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003egraceful-switchover;\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003e\u003cbr\u003e[edit routing-options]\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003enonstop-routing;\u003c/tt\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"8cbe9d5a-a066-4c94-8978-4b15efeae968\", \"shortName\": \"juniper\", \"dateUpdated\": \"2024-03-05T23:07:57.356Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-44186\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-03T14:49:41.755Z\", \"dateReserved\": \"2023-09-26T19:30:27.953Z\", \"assignerOrgId\": \"8cbe9d5a-a066-4c94-8978-4b15efeae968\", \"datePublished\": \"2023-10-11T20:08:26.308Z\", \"assignerShortName\": \"juniper\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2023-AVI-0836
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Juniper Networks | Junos OS | Junos OS séries QFX5000 versions antérieures à 20.4R3-S6, 21.1R3-S5, 21.2R3-S5, 21.3R3-S4, 21.4R3-S3, 22.1R3-S2, 22.2R2-S2, 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.2R1 | ||
| Juniper Networks | Junos OS | Junos OS sur les séries MX versions antérieures à 20.4R3-S7, 21.1R3-S5, 21.2R3-S4, 21.3R3-S4, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions antérieures à 20.4R3-S8-EVO, 21.1R3-S2-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S3-EVO, 22.3R3-S1-EVO, 22.4R3-EVO, 23.1R2-EVO, 23.2R1-S1-EVO, 23.2R2-EVO, 23.3R1-EVO | ||
| Juniper Networks | Junos OS | Junos OS versions antérieures à 20.2R3-S6, 20.3R3-S5, 20.4R3-S9, 21.1R3-S5, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R2-S2, 22.2R3-S2, 22.3R1-S2, 22.3R2-S2, 22.3R3-S1, 22.4R1-S2, 22.4R2-S2, 22.4R3, 23.1R2, 23.2R2, 23.3R1, |
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Junos OS s\u00e9ries QFX5000 versions ant\u00e9rieures \u00e0 20.4R3-S6, 21.1R3-S5, 21.2R3-S5, 21.3R3-S4, 21.4R3-S3, 22.1R3-S2, 22.2R2-S2, 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.2R1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur les s\u00e9ries MX versions ant\u00e9rieures \u00e0 20.4R3-S7, 21.1R3-S5, 21.2R3-S4, 21.3R3-S4, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 20.4R3-S8-EVO, 21.1R3-S2-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S3-EVO, 22.3R3-S1-EVO, 22.4R3-EVO, 23.1R2-EVO, 23.2R1-S1-EVO, 23.2R2-EVO, 23.3R1-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions ant\u00e9rieures \u00e0 20.2R3-S6, 20.3R3-S5, 20.4R3-S9, 21.1R3-S5, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R2-S2, 22.2R3-S2, 22.3R1-S2, 22.3R2-S2, 22.3R3-S1, 22.4R1-S2, 22.4R2-S2, 22.4R3, 23.1R2, 23.2R2, 23.3R1,",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-44199",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44199"
},
{
"name": "CVE-2023-36839",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36839"
},
{
"name": "CVE-2023-44184",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44184"
},
{
"name": "CVE-2023-44195",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44195"
},
{
"name": "CVE-2023-44177",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44177"
},
{
"name": "CVE-2023-44201",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44201"
},
{
"name": "CVE-2023-44193",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44193"
},
{
"name": "CVE-2023-44175",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44175"
},
{
"name": "CVE-2023-44197",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44197"
},
{
"name": "CVE-2023-44202",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44202"
},
{
"name": "CVE-2023-36841",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36841"
},
{
"name": "CVE-2023-44187",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44187"
},
{
"name": "CVE-2023-26551",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26551"
},
{
"name": "CVE-2023-44186",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44186"
},
{
"name": "CVE-2023-44194",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44194"
},
{
"name": "CVE-2023-22392",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22392"
},
{
"name": "CVE-2023-26555",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26555"
},
{
"name": "CVE-2023-36843",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36843"
},
{
"name": "CVE-2023-44182",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44182"
},
{
"name": "CVE-2023-44183",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44183"
},
{
"name": "CVE-2023-26552",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26552"
},
{
"name": "CVE-2023-44204",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44204"
},
{
"name": "CVE-2022-2274",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2274"
},
{
"name": "CVE-2023-44196",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44196"
},
{
"name": "CVE-2023-44189",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44189"
},
{
"name": "CVE-2023-44198",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44198"
},
{
"name": "CVE-2023-26554",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26554"
},
{
"name": "CVE-2023-44203",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44203"
},
{
"name": "CVE-2023-44178",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44178"
},
{
"name": "CVE-2022-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2097"
},
{
"name": "CVE-2023-44192",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44192"
},
{
"name": "CVE-2023-44181",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44181"
},
{
"name": "CVE-2023-26553",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26553"
},
{
"name": "CVE-2023-44191",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44191"
},
{
"name": "CVE-2023-44188",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44188"
},
{
"name": "CVE-2023-44190",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44190"
},
{
"name": "CVE-2023-44176",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44176"
},
{
"name": "CVE-2023-44185",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44185"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0836",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-10-12T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nun probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73141 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receipt-of-a-specific-genuine-PIM-packet-causes-RPD-crash-CVE-2023-44175"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73160 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-Packets-which-are-not-destined-to-the-router-can-reach-the-RE-CVE-2023-44195"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73146 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-In-a-BGP-scenario-RPD-crashes-upon-receiving-and-processing-a-specific-malformed-ISO-VPN--BGP-UPDATE-packet-CVE-2023-44185"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73169 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5000-series-EX2300-EX3400-EX4100-EX4400-and-EX4600-Packet-flooding-will-occur-when-IGMP-traffic-is-sent-to-an-isolated-VLAN-CVE-2023-44203"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73164 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-SIP-ALG-doesn-t-drop-specifically-malformed-retransmitted-SIP-packets-CVE-2023-44198"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73168 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-Specific-TCP-packets-will-bypass-a-control-plane-firewall-filter-CVE-2023-44202"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73167 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-A-local-attacker-can-retrieve-sensitive-information-and-elevate-privileges-on-the-devices-to-an-authorized-user-CVE-2023-44201"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73153 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-PTX10003-Series-MAC-address-validation-bypass-vulnerability-CVE-2023-44189"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73149 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-Unchecked-Return-Value-in-multiple-users-interfaces-affects-confidentiality-and-integrity-of-device-operations-CVE-2023-44182"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73140 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-Vulnerabilities-in-CLI-command"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73172 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-MX-Series-Receipt-of-malformed-TCP-traffic-will-cause-a-Denial-of-Service-CVE-2023-36841"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73162 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-PTX10003-Series-Packets-which-are-not-destined-to-the-router-can-reach-the-RE-CVE-2023-44196"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73165 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-MX-Series-In-a-PTP-scenario-a-prolonged-routing-protocol-churn-can-trigger-an-FPC-reboot-CVE-2023-44199"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73152 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-jkdsd-crash-due-to-multiple-telemetry-requests-CVE-2023-44188"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73157 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-MX-Series-An-FPC-crash-is-observed-when-CFM-is-enabled-in-a-VPLS-scenario-and-a-specific-LDP-related-command-is-run-CVE-2023-44193"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73154 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-PTX10001-PTX10004-PTX10008-PTX10016-MAC-address-validation-bypass-vulnerability-CVE-2023-44190"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73170 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-The-rpd-will-crash-upon-receiving-a-malformed-BGP-UPDATE-message-CVE-2023-44204"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73150 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-RPD-crash-when-attempting-to-send-a-very-long-AS-PATH-to-a-non-4-byte-AS-capable-BGP-neighbor-CVE-2023-44186"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73171 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-l2cpd-crash-will-occur-when-specific-LLDP-packets-are-received-CVE-2023-36839"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73145 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5k-l2-loop-in-the-overlay-impacts-the-stability-in-a-EVPN-VXLAN-environment-CVE-2023-44181"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73174 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-SRX-Series-The-PFE-will-crash-on-receiving-malformed-SSL-traffic-when-ATP-is-enabled-CVE-2023-36843"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73530 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-PTX-Series-and-QFX10000-Series-Received-flow-routes-which-aren-t-installed-as-the-hardware-doesn-t-support-them-lead-to-an-FPC-heap-memory-leak-CVE-2023-22392"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73176 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Vulnerability-fixed-in-OpenSSL"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73156 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5000-Series-DMA-memory-leak-is-observed-when-specific-DHCP-packets-are-transmitted-over-pseudo-VTEP-CVE-2023-44192"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73148 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5000-Series-EX4600-Series-In-a-VxLAN-scenario-an-adjacent-attacker-within-the-VxLAN-sending-genuine-packets-may-cause-a-DMA-memory-leak-to-occur-CVE-2023-44183"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73147 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-High-CPU-load-due-to-specific-NETCONF-command-CVE-2023-44184"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73151 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-file-copy-CLI-command-can-disclose-password-to-shell-users-CVE-2023-44187"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73177 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-NTP-vulnerabilities-resolved"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73163 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-rpd-crash-may-occur-when-BGP-is-processing-newly-learned-routes-CVE-2023-44197"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73155 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5000-Series-and-EX4000-Series-Denial-of-Service-DoS-on-a-large-scale-VLAN-due-to-PFE-hogging-CVE-2023-44191"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73158 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-An-unauthenticated-attacker-with-local-access-to-the-device-can-create-a-backdoor-with-root-privileges-CVE-2023-44194"
}
]
}
CERTFR-2023-AVI-0836
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Juniper Networks | Junos OS | Junos OS séries QFX5000 versions antérieures à 20.4R3-S6, 21.1R3-S5, 21.2R3-S5, 21.3R3-S4, 21.4R3-S3, 22.1R3-S2, 22.2R2-S2, 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.2R1 | ||
| Juniper Networks | Junos OS | Junos OS sur les séries MX versions antérieures à 20.4R3-S7, 21.1R3-S5, 21.2R3-S4, 21.3R3-S4, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions antérieures à 20.4R3-S8-EVO, 21.1R3-S2-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S3-EVO, 22.3R3-S1-EVO, 22.4R3-EVO, 23.1R2-EVO, 23.2R1-S1-EVO, 23.2R2-EVO, 23.3R1-EVO | ||
| Juniper Networks | Junos OS | Junos OS versions antérieures à 20.2R3-S6, 20.3R3-S5, 20.4R3-S9, 21.1R3-S5, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R2-S2, 22.2R3-S2, 22.3R1-S2, 22.3R2-S2, 22.3R3-S1, 22.4R1-S2, 22.4R2-S2, 22.4R3, 23.1R2, 23.2R2, 23.3R1, |
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Junos OS s\u00e9ries QFX5000 versions ant\u00e9rieures \u00e0 20.4R3-S6, 21.1R3-S5, 21.2R3-S5, 21.3R3-S4, 21.4R3-S3, 22.1R3-S2, 22.2R2-S2, 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.2R1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS sur les s\u00e9ries MX versions ant\u00e9rieures \u00e0 20.4R3-S7, 21.1R3-S5, 21.2R3-S4, 21.3R3-S4, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 20.4R3-S8-EVO, 21.1R3-S2-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S3-EVO, 22.3R3-S1-EVO, 22.4R3-EVO, 23.1R2-EVO, 23.2R1-S1-EVO, 23.2R2-EVO, 23.3R1-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions ant\u00e9rieures \u00e0 20.2R3-S6, 20.3R3-S5, 20.4R3-S9, 21.1R3-S5, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R2-S2, 22.2R3-S2, 22.3R1-S2, 22.3R2-S2, 22.3R3-S1, 22.4R1-S2, 22.4R2-S2, 22.4R3, 23.1R2, 23.2R2, 23.3R1,",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-44199",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44199"
},
{
"name": "CVE-2023-36839",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36839"
},
{
"name": "CVE-2023-44184",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44184"
},
{
"name": "CVE-2023-44195",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44195"
},
{
"name": "CVE-2023-44177",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44177"
},
{
"name": "CVE-2023-44201",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44201"
},
{
"name": "CVE-2023-44193",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44193"
},
{
"name": "CVE-2023-44175",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44175"
},
{
"name": "CVE-2023-44197",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44197"
},
{
"name": "CVE-2023-44202",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44202"
},
{
"name": "CVE-2023-36841",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36841"
},
{
"name": "CVE-2023-44187",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44187"
},
{
"name": "CVE-2023-26551",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26551"
},
{
"name": "CVE-2023-44186",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44186"
},
{
"name": "CVE-2023-44194",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44194"
},
{
"name": "CVE-2023-22392",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22392"
},
{
"name": "CVE-2023-26555",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26555"
},
{
"name": "CVE-2023-36843",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36843"
},
{
"name": "CVE-2023-44182",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44182"
},
{
"name": "CVE-2023-44183",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44183"
},
{
"name": "CVE-2023-26552",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26552"
},
{
"name": "CVE-2023-44204",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44204"
},
{
"name": "CVE-2022-2274",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2274"
},
{
"name": "CVE-2023-44196",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44196"
},
{
"name": "CVE-2023-44189",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44189"
},
{
"name": "CVE-2023-44198",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44198"
},
{
"name": "CVE-2023-26554",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26554"
},
{
"name": "CVE-2023-44203",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44203"
},
{
"name": "CVE-2023-44178",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44178"
},
{
"name": "CVE-2022-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2097"
},
{
"name": "CVE-2023-44192",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44192"
},
{
"name": "CVE-2023-44181",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44181"
},
{
"name": "CVE-2023-26553",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26553"
},
{
"name": "CVE-2023-44191",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44191"
},
{
"name": "CVE-2023-44188",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44188"
},
{
"name": "CVE-2023-44190",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44190"
},
{
"name": "CVE-2023-44176",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44176"
},
{
"name": "CVE-2023-44185",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44185"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0836",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-10-12T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nun probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73141 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receipt-of-a-specific-genuine-PIM-packet-causes-RPD-crash-CVE-2023-44175"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73160 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-Packets-which-are-not-destined-to-the-router-can-reach-the-RE-CVE-2023-44195"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73146 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-In-a-BGP-scenario-RPD-crashes-upon-receiving-and-processing-a-specific-malformed-ISO-VPN--BGP-UPDATE-packet-CVE-2023-44185"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73169 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5000-series-EX2300-EX3400-EX4100-EX4400-and-EX4600-Packet-flooding-will-occur-when-IGMP-traffic-is-sent-to-an-isolated-VLAN-CVE-2023-44203"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73164 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-SIP-ALG-doesn-t-drop-specifically-malformed-retransmitted-SIP-packets-CVE-2023-44198"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73168 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-Specific-TCP-packets-will-bypass-a-control-plane-firewall-filter-CVE-2023-44202"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73167 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-A-local-attacker-can-retrieve-sensitive-information-and-elevate-privileges-on-the-devices-to-an-authorized-user-CVE-2023-44201"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73153 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-PTX10003-Series-MAC-address-validation-bypass-vulnerability-CVE-2023-44189"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73149 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-Unchecked-Return-Value-in-multiple-users-interfaces-affects-confidentiality-and-integrity-of-device-operations-CVE-2023-44182"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73140 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-Vulnerabilities-in-CLI-command"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73172 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-MX-Series-Receipt-of-malformed-TCP-traffic-will-cause-a-Denial-of-Service-CVE-2023-36841"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73162 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-PTX10003-Series-Packets-which-are-not-destined-to-the-router-can-reach-the-RE-CVE-2023-44196"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73165 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-MX-Series-In-a-PTP-scenario-a-prolonged-routing-protocol-churn-can-trigger-an-FPC-reboot-CVE-2023-44199"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73152 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-jkdsd-crash-due-to-multiple-telemetry-requests-CVE-2023-44188"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73157 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-MX-Series-An-FPC-crash-is-observed-when-CFM-is-enabled-in-a-VPLS-scenario-and-a-specific-LDP-related-command-is-run-CVE-2023-44193"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73154 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-PTX10001-PTX10004-PTX10008-PTX10016-MAC-address-validation-bypass-vulnerability-CVE-2023-44190"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73170 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-The-rpd-will-crash-upon-receiving-a-malformed-BGP-UPDATE-message-CVE-2023-44204"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73150 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-RPD-crash-when-attempting-to-send-a-very-long-AS-PATH-to-a-non-4-byte-AS-capable-BGP-neighbor-CVE-2023-44186"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73171 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-l2cpd-crash-will-occur-when-specific-LLDP-packets-are-received-CVE-2023-36839"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73145 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5k-l2-loop-in-the-overlay-impacts-the-stability-in-a-EVPN-VXLAN-environment-CVE-2023-44181"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73174 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-SRX-Series-The-PFE-will-crash-on-receiving-malformed-SSL-traffic-when-ATP-is-enabled-CVE-2023-36843"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73530 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-PTX-Series-and-QFX10000-Series-Received-flow-routes-which-aren-t-installed-as-the-hardware-doesn-t-support-them-lead-to-an-FPC-heap-memory-leak-CVE-2023-22392"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73176 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Vulnerability-fixed-in-OpenSSL"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73156 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5000-Series-DMA-memory-leak-is-observed-when-specific-DHCP-packets-are-transmitted-over-pseudo-VTEP-CVE-2023-44192"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73148 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5000-Series-EX4600-Series-In-a-VxLAN-scenario-an-adjacent-attacker-within-the-VxLAN-sending-genuine-packets-may-cause-a-DMA-memory-leak-to-occur-CVE-2023-44183"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73147 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-High-CPU-load-due-to-specific-NETCONF-command-CVE-2023-44184"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73151 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-Evolved-file-copy-CLI-command-can-disclose-password-to-shell-users-CVE-2023-44187"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73177 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-NTP-vulnerabilities-resolved"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73163 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-rpd-crash-may-occur-when-BGP-is-processing-newly-learned-routes-CVE-2023-44197"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73155 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-QFX5000-Series-and-EX4000-Series-Denial-of-Service-DoS-on-a-large-scale-VLAN-due-to-PFE-hogging-CVE-2023-44191"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA73158 du 11 octobre 2023",
"url": "https://supportportal.juniper.net/s/article/2023-10-Security-Bulletin-Junos-OS-An-unauthenticated-attacker-with-local-access-to-the-device-can-create-a-backdoor-with-root-privileges-CVE-2023-44194"
}
]
}
FKIE_CVE-2023-44186
Vulnerability from fkie_nvd - Published: 2023-10-11 21:15 - Updated: 2024-11-21 08:257.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| URL | Tags | ||
|---|---|---|---|
| sirt@juniper.net | https://supportportal.juniper.net/JSA73150 | Mitigation, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://supportportal.juniper.net/JSA73150 | Mitigation, Vendor Advisory |
| Vendor | Product | Version | |
|---|---|---|---|
| juniper | junos | * | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 20.4 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.1 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.2 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.3 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 21.4 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.1 | |
| juniper | junos | 22.2 | |
| juniper | junos | 22.2 | |
| juniper | junos | 22.2 | |
| juniper | junos | 22.2 | |
| juniper | junos | 22.2 | |
| juniper | junos | 22.2 | |
| juniper | junos | 22.2 | |
| juniper | junos | 22.2 | |
| juniper | junos | 22.3 | |
| juniper | junos | 22.3 | |
| juniper | junos | 22.3 | |
| juniper | junos | 22.3 | |
| juniper | junos | 22.3 | |
| juniper | junos | 22.3 | |
| juniper | junos | 22.4 | |
| juniper | junos | 22.4 | |
| juniper | junos | 22.4 | |
| juniper | junos | 22.4 | |
| juniper | junos | 23.1 | |
| juniper | junos | 23.2 | |
| juniper | junos | 23.2 | |
| juniper | junos_os_evolved | * | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 20.4 | |
| juniper | junos_os_evolved | 21.1 | |
| juniper | junos_os_evolved | 21.1 | |
| juniper | junos_os_evolved | 21.1 | |
| juniper | junos_os_evolved | 21.1 | |
| juniper | junos_os_evolved | 21.1 | |
| juniper | junos_os_evolved | 21.1 | |
| juniper | junos_os_evolved | 21.1 | |
| juniper | junos_os_evolved | 21.1 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.2 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.3 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 21.4 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.1 | |
| juniper | junos_os_evolved | 22.2 | |
| juniper | junos_os_evolved | 22.2 | |
| juniper | junos_os_evolved | 22.2 | |
| juniper | junos_os_evolved | 22.2 | |
| juniper | junos_os_evolved | 22.2 | |
| juniper | junos_os_evolved | 22.2 | |
| juniper | junos_os_evolved | 22.2 | |
| juniper | junos_os_evolved | 22.3 | |
| juniper | junos_os_evolved | 22.3 | |
| juniper | junos_os_evolved | 22.3 | |
| juniper | junos_os_evolved | 22.3 | |
| juniper | junos_os_evolved | 22.3 | |
| juniper | junos_os_evolved | 22.4 | |
| juniper | junos_os_evolved | 22.4 | |
| juniper | junos_os_evolved | 22.4 | |
| juniper | junos_os_evolved | 22.4 | |
| juniper | junos_os_evolved | 23.2 | |
| juniper | junos_os_evolved | 23.2 | |
| juniper | junos_os_evolved | 23.2 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E3A96966-5060-4139-A124-D4E2C879FD6C",
"versionEndExcluding": "20.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
"matchCriteriaId": "3D361B23-A3C2-444B-BEB8-E231DA950567",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "037BA01C-3F5C-4503-A633-71765E9EF774",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "C54B047C-4B38-40C0-9855-067DCF7E48BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "38984199-E332-4A9C-A4C0-78083D052E15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "AA6526FB-2941-4D18-9B2E-472AD5A62A53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
"matchCriteriaId": "09876787-A40A-4340-9C12-8628C325353B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "41615104-C17E-44DA-AB0D-6E2053BD4EF4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "1981DE38-36B5-469D-917E-92717EE3ED53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "AFA68ACD-AAE5-4577-B734-23AAF77BC85A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "65948ABC-22BB-46D5-8545-0806EDB4B86E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "283E41CB-9A90-4521-96DC-F31AA592CFD8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*",
"matchCriteriaId": "14EEA504-CBC5-4F6F-889A-D505EC4BB5B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*",
"matchCriteriaId": "977DEF80-0DB5-4828-97AC-09BB3111D585",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "625BA7E6-D2AD-4A48-9B94-24328BE5B06A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "F462F4E3-762C-429F-8D25-5521100DD37C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
"matchCriteriaId": "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "689FE1AE-7A85-4FB6-AB02-E732F23581B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "79E56DAC-75AD-4C81-9835-634B40C15DA6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
"matchCriteriaId": "A0040FE2-7ECD-4755-96CE-E899BA298E0C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "076AB086-BB79-4583-AAF7-A5233DFB2F95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "72E2DDF6-01DF-4880-AB60-B3DA3281E88D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "54010163-0810-4CF5-95FE-7E62BC6CA4F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "5C1C3B09-3800-493E-A319-57648305FE6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "4BFDCC2B-FAB5-4164-8D70-28E4DFF052AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
"matchCriteriaId": "216E7DDE-453D-481F-92E2-9F8466CDDA3F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "A52AF794-B36B-43A6-82E9-628658624B0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "3998DC76-F72F-4452-9150-652140B113EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "36ED4552-2420-45F9-B6E4-6DA2B2B12870",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
"matchCriteriaId": "C28A14E7-7EA0-4757-9764-E39A27CFDFA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "4A43752D-A4AF-4B4E-B95B-192E42883A5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "42986538-E9D0-4C2E-B1C4-A763A4EE451B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
"matchCriteriaId": "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "E596ABD9-6ECD-48DC-B770-87B7E62EA345",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "71745D02-D226-44DC-91AD-678C85F5E6FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "39E44B09-7310-428C-8144-AE9DB0484D1F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "53938295-8999-4316-9DED-88E24D037852",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "2307BF56-640F-49A8-B060-6ACB0F653A61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
"matchCriteriaId": "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
"matchCriteriaId": "CC78A4CB-D617-43FC-BB51-287D2D0C44ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "30FF67F8-1E3C-47A8-8859-709B3614BA6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "0C7C507E-C85E-4BC6-A3B0-549516BAB524",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
"matchCriteriaId": "6514CDE8-35DC-469F-89A3-078684D18F7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "4624565D-8F59-44A8-B7A8-01AD579745E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
"matchCriteriaId": "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "255B6F20-D32F-42C1-829C-AE9C7923558A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "90AE30DB-C448-4FE9-AC11-FF0F27CDA227",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "93F324AE-65D3-4CFC-AEAB-898CE1BD05CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "3CCBB2F4-F05B-4CC5-9B1B-ECCB798D0483",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
"matchCriteriaId": "79ED3CE8-CC57-43AB-9A26-BBC87816062D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "9962B01C-C57C-4359-9532-676AB81CE8B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "62178549-B679-4902-BFDB-2993803B7FCE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "9AD697DF-9738-4276-94ED-7B9380CD09F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "09FF5818-0803-4646-A386-D7C645EE58A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "2229FA59-EB24-49A2-85CE-F529A8DE6BA7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
"matchCriteriaId": "0CB280D8-C5D8-4B51-A879-496ACCDE4538",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "5F3F54F1-75B3-400D-A735-2C27C8CEBE79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "0A5B196A-2AF1-4AE5-9148-A75A572807BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "3B457616-2D91-4913-9A7D-038BBF8F1F66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "3F96EBE9-2532-4E35-ABA5-CA68830476A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "B4D936AE-FD74-4823-A824-2D9F24C25BFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "E117E493-F4E1-4568-88E3-F243C74A2662",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
"matchCriteriaId": "01E3E308-FD9C-4686-8C35-8472A0E99F0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "3683A8F5-EE0E-4936-A005-DF7F6B75DED3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "1B615DBA-8C53-41D4-B264-D3EED8578471",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
"matchCriteriaId": "B3124DD0-9E42-4896-9060-CB7DD07FC342",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "44F6FD6C-03AF-4D2C-B411-A753DE12A2DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "D49FFB60-BA71-4902-9404-E67162919ADC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "EFF72FCA-C440-4D43-9BDB-F712DB413717",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "E949B21B-AD62-4022-9088-06313277479E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "8D862E6F-0D01-4B25-8340-888C30F75A2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "2F28F73E-8563-41B9-A313-BBAAD5B57A67",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
"matchCriteriaId": "E37D4694-C80B-475E-AB5B-BB431F59C5E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "5EC0D2D2-4922-4675-8A2C-57A08D7BE334",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "9EC91F9D-DEDA-46B4-A39F-59A2CDB86C2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*",
"matchCriteriaId": "591AA3E6-62A2-4A1A-A04C-E808F71D8B6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "786F993E-32CB-492A-A7CC-A7E4F48EA8B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
"matchCriteriaId": "19519212-51DD-4448-B115-8A20A40192CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "5CC9909E-AE9F-414D-99B1-83AA04D5297B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "FDE9E767-4713-4EA2-8D00-1382975A4A15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*",
"matchCriteriaId": "59DDA54E-6845-47EB-AE3C-5EC6BD33DFA7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "574730B0-56C8-4A03-867B-1737148ED9B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:*",
"matchCriteriaId": "FB4C0FBF-8813-44E5-B71A-22CBAA603E2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "28E42A41-7965-456B-B0AF-9D3229CE4D4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "CB1A77D6-D3AD-481B-979C-8F778530B175",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "3A064B6B-A99B-4D8D-A62D-B00C7870BC30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "40813417-A938-4F74-A419-8C5188A35486",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:23.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "0038F142-6F5E-476D-A1EC-E977FD30F155",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "4B3B2FE1-C228-46BE-AC76-70C2687050AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "F1B16FF0-900F-4AEE-B670-A537139F6909",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0F41A7DF-2B27-4E2E-ABFC-E0510A028199",
"versionEndExcluding": "20.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
"matchCriteriaId": "247FB9DF-7EC0-4298-B27C-3235D141C1D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "C9C8866D-162F-4C9B-8167-2FBA25410368",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "F85E5BC7-8607-4330-AA72-2273D32F8604",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "878C81C9-A418-4A21-8FDB-2116A992679C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "7451A671-A3CC-4904-8D45-947B1D3783C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "0108AD20-EAE6-41D1-AE48-254C46B5388A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
"matchCriteriaId": "E554FD12-FE69-44D1-B2C9-4382F8CA4456",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
"matchCriteriaId": "E0C1D53E-70BE-4246-89ED-1074C8C70747",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "B38A90A9-B739-49BE-8845-9ABF846CCC5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "AAE56A7C-BA26-405F-A640-C43AF78B0A3B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "683D8EED-9F26-41E7-B69C-FE198225A8F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "8979C85C-87DD-42B1-9CCC-BC3F7007C600",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s6:*:*:*:*:*:*",
"matchCriteriaId": "5BDD5111-1BC2-456B-8A31-F2D252DF613C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s7:*:*:*:*:*:*",
"matchCriteriaId": "89B9BF7C-525C-4819-B80D-9B5F240F9878",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*",
"matchCriteriaId": "52C3552E-798F-4719-B38D-F74E34EAAA40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "AE674DD3-3590-4434-B144-5AD7EB5F039D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "0099BDA9-9D4B-4D6C-8234-EFD9E8C63476",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*",
"matchCriteriaId": "D8729BC1-FB09-4E6D-A5D5-8BDC589555B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*",
"matchCriteriaId": "9D72C3DF-4513-48AC-AAED-C1AADF0794E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "8C583289-96C4-4451-A320-14CA1C390819",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "FA43782E-0719-496E-9237-E1ABD3C4C664",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "78897DD2-E161-4191-94FF-7400FB612DF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
"matchCriteriaId": "620B0CDD-5566-472E-B96A-31D2C12E3120",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "7E1E57AF-979B-4022-8AD6-B3558E06B718",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
"matchCriteriaId": "7BA246F0-154E-4F44-A97B-690D22FA73DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "2B70C784-534B-4FAA-A5ED-3709656E2B97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*",
"matchCriteriaId": "60448FFB-568E-4280-9261-ADD65244F31A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "2B770C52-7E3E-4B92-9138-85DEC56F3B22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "E88AC378-461C-4EFA-A04B-5786FF21FE03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "3B0AFB30-81DC-465C-9F63-D1B15EA4809A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "2035F0AC-29E7-478A-A9D0-BAA3A88B3413",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "C34ABD4B-B045-4046-9641-66E3B2082A25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
"matchCriteriaId": "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
"matchCriteriaId": "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "FEE0E145-8E1C-446E-90ED-237E3B9CAF47",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
"matchCriteriaId": "0F26369D-21B2-4C6A-98C1-492692A61283",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "24003819-1A6B-4BDF-B3DF-34751C137788",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "BF8D332E-9133-45B9-BB07-B33C790F737A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*",
"matchCriteriaId": "3E2A4377-D044-4E43-B6CC-B753D7F6ABD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "8DAEC4F4-5748-4D36-A72B-4C62A0A30E38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "C76DA7A5-9320-4E21-96A2-ACE70803A1CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "703C73EB-2D63-4D4F-8129-239AE1E96B2B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "8F67CE3C-3A06-487C-90DE-D5B3B1EC08A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
"matchCriteriaId": "2E907193-075E-45BC-9257-9607DB790D71",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "CEDF46A8-FC3A-4779-B695-2CA11D045AEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "39809219-9F87-4583-9DAD-9415DD320B36",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "DB299492-A919-4EBA-A62A-B3CF02FC0A95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "74ED0939-D5F8-4334-9838-40F29DE3597F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "C6937069-8C19-4B01-8415-ED7E9EAE2CE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*",
"matchCriteriaId": "97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "21DF05B8-EF7E-422F-8831-06904160714C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "492FCE45-68A1-4378-85D4-C4034FE0D836",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "522114CC-1505-4205-B4B8-797DE1BD833B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "C9D664AB-0FA7-49C7-B6E1-69C77652FBEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "750FE748-82E7-4419-A061-2DEA26E35309",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "236E23E5-8B04-4081-9D97-7300DF284000",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*",
"matchCriteriaId": "97541867-C52F-40BB-9AAE-7E87ED23D789",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "85CF6664-E35A-4E9B-95C0-CDC91F7F331A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3:*:*:*:*:*:*",
"matchCriteriaId": "E048A05D-882F-4B1C-BA32-3BBA3FEA31A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "47E8D51D-1424-4B07-B036-E3E195F21AC2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "6F3C82ED-5728-406F-ACF6-D7411B0AB6C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "1475A58F-1515-4492-B5A3-BE40C30E5B14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "D77A072D-350A-42F2-8324-7D3AC1711BF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "83AE395C-A651-4568-88E3-3600544BF799",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*",
"matchCriteriaId": "B3BE1FD4-DAD9-4357-A2E9-20E5826B0D5C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "81CC3480-4B65-4588-8D46-FA80A8F6D143",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "F7E76F5F-DB37-4B7F-9247-3CEB4EBD7696",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r3:*:*:*:*:*:*",
"matchCriteriaId": "C63DBEE5-B0C2-498F-A672-B6596C89B0A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "9370C46D-3AA1-4562-B67F-DF6EA10F209B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1:*:*:*:*:*:*",
"matchCriteriaId": "433631CA-3AC4-4D66-9B46-AEA4209347F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "6E4CD8AD-277A-4FC5-A102-3E151060C216",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "4BC09BAC-83E7-48CE-B571-ED49277B2987",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r2:*:*:*:*:*:*",
"matchCriteriaId": "FA4481D2-F693-48A5-8DBC-E86430987A25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "136CA584-2475-4A14-9771-F367180201D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "93887799-F62C-4A4A-BCF5-004D0B4D4154",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "62C473D2-2612-4480-82D8-8A24D0687BBD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "7FB4C5CA-A709-4B13-A9E0-372098A72AD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "04CE952D-E3C1-4B34-9E65-EC52BFE887AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*",
"matchCriteriaId": "6DEAA7FD-385F-4221-907E-65ABC16BE4BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "DDEC008A-3137-48D1-8ABC-6DB0EFC40E50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "558D234D-BC50-415F-86D6-8E19D6C3ACE0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\n\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\n\nNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\nThis issue affects:\n\nJuniper Networks Junos OS:\n\n\n\n * All versions prior to 20.4R3-S8;\n * 21.1 versions 21.1R1 and later;\n * 21.2 versions prior to 21.2R3-S6;\n * 21.3 versions prior to 21.3R3-S5;\n * 21.4 versions prior to 21.4R3-S5;\n * 22.1 versions prior to 22.1R3-S4;\n * 22.2 versions prior to 22.2R3-S2;\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\n * 22.4 versions prior to 22.4R2-S1, 22.4R3.\n\n\n\n\nJuniper Networks Junos OS Evolved\n\n\n\n * All versions prior to 20.4R3-S8-EVO;\n * 21.1 versions 21.1R1-EVO and later;\n * 21.2 versions prior to 21.2R3-S6-EVO;\n * 21.3 versions prior to 21.3R3-S5-EVO;\n * 21.4 versions prior to 21.4R3-S5-EVO;\n * 22.1 versions prior to 22.1R3-S4-EVO;\n * 22.2 versions prior to 22.2R3-S2-EVO;\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\n\n\n\n\n\n\n"
},
{
"lang": "es",
"value": "Una vulnerabilidad de Improper Handling of Exceptional Conditions en el procesamiento AS PATH de Juniper Networks Junos OS y Junos OS Evolved permite a un atacante enviar un mensaje de actualizaci\u00f3n de BGP con un AS PATH que contiene una gran cantidad de AS de 4 bytes, lo que lleva a una Denegaci\u00f3n de Servicio ( DoS). La recepci\u00f3n y el procesamiento continuo de estas actualizaciones de BGP crear\u00e1n una condici\u00f3n sostenida de Denegaci\u00f3n de Servicio (DoS). Este problema se produce cuando el router tiene habilitado Non-Stop Routing (NSR), tiene un vecino BGP que no es de 4 bytes con capacidad AS, recibe un mensaje de actualizaci\u00f3n de BGP con un prefijo que incluye un AS PATH largo que contiene una gran cantidad de 4 bytes. AS de bytes y tiene que anunciar el prefijo hacia el vecino BGP que no es compatible con AS de 4 bytes.\nNota: NSR no es compatible con la serie SRX y, por lo tanto, no se ve afectado por esta vulnerabilidad. \nEste problema afecta a: \nJuniper Networks Junos OS: * Todas las versiones anteriores a 20.4R3-S8; * 21.1 versiones 21.1R1 y posteriores; * Versiones 21.2 anteriores a 21.2R3-S6; * Versiones 21.3 anteriores a 21.3R3-S5; * Versiones 21.4 anteriores a 21.4R3-S5; * Versiones 22.1 anteriores a 22.1R3-S4; * Versiones 22.2 anteriores a 22.2R3-S2; * Versiones 22.3 anteriores a 22.3R2-S2, 22.3R3-S1; * Versiones 22.4 anteriores a 22.4R2-S1, 22.4R3; * Versiones 23.2 anteriores a 23.2R2. \nJuniper Networks Junos OS Evolved * Todas las versiones anteriores a 20.4R3-S8-EVO; * 21.1 versiones 21.1R1-EVO y posteriores; * Versiones 21.2 anteriores a 21.2R3-S6-EVO; * Versiones 21.3 anteriores a 21.3R3-S5-EVO; * Versiones 21.4 anteriores a 21.4R3-S5-EVO; * Versiones 22.1 anteriores a 22.1R3-S4-EVO; * Versiones 22.2 anteriores a 22.2R3-S2-EVO; * Versiones 22.3 anteriores a 22.3R2-S2-EVO, 22.3R3-S1-EVO; * Versiones 22.4 anteriores a 22.4R2-S1-EVO, 22.4R3-EVO; * Versiones 23.2 anteriores a 23.2R2-EVO."
}
],
"id": "CVE-2023-44186",
"lastModified": "2024-11-21T08:25:23.820",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "sirt@juniper.net",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2023-10-11T21:15:09.890",
"references": [
{
"source": "sirt@juniper.net",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"url": "https://supportportal.juniper.net/JSA73150"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"url": "https://supportportal.juniper.net/JSA73150"
}
],
"sourceIdentifier": "sirt@juniper.net",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-755"
}
],
"source": "sirt@juniper.net",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-755"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-8PVV-PX4F-4PX7
Vulnerability from github – Published: 2023-10-11 21:33 – Updated: 2024-03-06 00:31An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.
This issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.
This issue affects:
Juniper Networks Junos OS:
- All versions prior to 20.4R3-S8;
- 21.1 versions 21.1R1 and later;
- 21.2 versions prior to 21.2R3-S6;
- 21.3 versions prior to 21.3R3-S5;
- 21.4 versions prior to 21.4R3-S5;
- 22.1 versions prior to 22.1R3-S4;
- 22.2 versions prior to 22.2R3-S2;
- 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;
- 22.4 versions prior to 22.4R2-S1, 22.4R3;
- 23.2 versions prior to 23.2R2.
Juniper Networks Junos OS Evolved
- All versions prior to 20.4R3-S8-EVO;
- 21.1 versions 21.1R1-EVO and later;
- 21.2 versions prior to 21.2R3-S6-EVO;
- 21.3 versions prior to 21.3R3-S5-EVO;
- 21.4 versions prior to 21.4R3-S5-EVO;
- 22.1 versions prior to 22.1R3-S4-EVO;
- 22.2 versions prior to 22.2R3-S2-EVO;
- 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;
- 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;
- 23.2 versions prior to 23.2R2-EVO.
{
"affected": [],
"aliases": [
"CVE-2023-44186"
],
"database_specific": {
"cwe_ids": [
"CWE-755"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-10-11T21:15:09Z",
"severity": "HIGH"
},
"details": "\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\n\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\n\nThis issue affects:\n\nJuniper Networks Junos OS:\n\n\n\n * All versions prior to 20.4R3-S8;\n * 21.1 versions 21.1R1 and later;\n * 21.2 versions prior to 21.2R3-S6;\n * 21.3 versions prior to 21.3R3-S5;\n * 21.4 versions prior to 21.4R3-S5;\n * 22.1 versions prior to 22.1R3-S4;\n * 22.2 versions prior to 22.2R3-S2;\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\n * 22.4 versions prior to 22.4R2-S1, 22.4R3;\n * 23.2 versions prior to 23.2R2.\n\n\n\n\nJuniper Networks Junos OS Evolved\n\n\n\n * All versions prior to 20.4R3-S8-EVO;\n * 21.1 versions 21.1R1-EVO and later;\n * 21.2 versions prior to 21.2R3-S6-EVO;\n * 21.3 versions prior to 21.3R3-S5-EVO;\n * 21.4 versions prior to 21.4R3-S5-EVO;\n * 22.1 versions prior to 22.1R3-S4-EVO;\n * 22.2 versions prior to 22.2R3-S2-EVO;\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;\n * 23.2 versions prior to 23.2R2-EVO.\n\n\n\n\n\n\n",
"id": "GHSA-8pvv-px4f-4px7",
"modified": "2024-03-06T00:31:26Z",
"published": "2023-10-11T21:33:25Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44186"
},
{
"type": "WEB",
"url": "https://supportportal.juniper.net/JSA73150"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2023-44186
Vulnerability from gsd - Updated: 2023-12-13 01:20{
"GSD": {
"alias": "CVE-2023-44186",
"id": "GSD-2023-44186"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2023-44186"
],
"details": "\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\n\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\n\nNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\nThis issue affects:\n\nJuniper Networks Junos OS:\n\n\n\n * All versions prior to 20.4R3-S8;\n * 21.1 versions 21.1R1 and later;\n * 21.2 versions prior to 21.2R3-S6;\n * 21.3 versions prior to 21.3R3-S5;\n * 21.4 versions prior to 21.4R3-S5;\n * 22.1 versions prior to 22.1R3-S4;\n * 22.2 versions prior to 22.2R3-S2;\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\n * 22.4 versions prior to 22.4R2-S1, 22.4R3;\n * 23.2 versions prior to 23.2R2.\n\n\n\n\nJuniper Networks Junos OS Evolved\n\n\n\n * All versions prior to 20.4R3-S8-EVO;\n * 21.1 versions 21.1R1-EVO and later;\n * 21.2 versions prior to 21.2R3-S6-EVO;\n * 21.3 versions prior to 21.3R3-S5-EVO;\n * 21.4 versions prior to 21.4R3-S5-EVO;\n * 22.1 versions prior to 22.1R3-S4-EVO;\n * 22.2 versions prior to 22.2R3-S2-EVO;\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;\n * 23.2 versions prior to 23.2R2-EVO.\n\n\n\n\n\n\n",
"id": "GSD-2023-44186",
"modified": "2023-12-13T01:20:38.636983Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "sirt@juniper.net",
"ID": "CVE-2023-44186",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Junos OS",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "0",
"version_value": "20.4R3-S8"
},
{
"version_affected": "\u003c",
"version_name": "21.1R1",
"version_value": "21.1*"
},
{
"version_affected": "\u003c",
"version_name": "21.2",
"version_value": "21.2R3-S6"
},
{
"version_affected": "\u003c",
"version_name": "21.3",
"version_value": "21.3R3-S5"
},
{
"version_affected": "\u003c",
"version_name": "21.4",
"version_value": "21.4R3-S5"
},
{
"version_affected": "\u003c",
"version_name": "22.1",
"version_value": "22.1R3-S4"
},
{
"version_affected": "\u003c",
"version_name": "22.2",
"version_value": "22.2R3-S2"
},
{
"version_affected": "\u003c",
"version_name": "22.3",
"version_value": "22.3R2-S2, 22.3R3-S1"
},
{
"version_affected": "\u003c",
"version_name": "22.4",
"version_value": "22.4R2-S1, 22.4R3"
}
]
}
},
{
"product_name": "Junos OS Evolved",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "0",
"version_value": "20.4R3-S8-EVO"
},
{
"version_affected": "\u003c",
"version_name": "21.1",
"version_value": "21.1*-EVO"
},
{
"version_affected": "\u003c",
"version_name": "21.2",
"version_value": "21.2R3-S6-EVO"
},
{
"version_affected": "\u003c",
"version_name": "21.3",
"version_value": "21.3R3-S5-EVO"
},
{
"version_affected": "\u003c",
"version_name": "21.4",
"version_value": "21.4R3-S5-EVO"
},
{
"version_affected": "\u003c",
"version_name": "22.1",
"version_value": "22.1R3-S4-EVO"
},
{
"version_affected": "\u003c",
"version_name": "22.2",
"version_value": "22.2R3-S2-EVO"
},
{
"version_affected": "\u003c",
"version_name": "22.3",
"version_value": "22.3R2-S2-EVO, 22.3R3-S1-EVO"
},
{
"version_affected": "\u003c",
"version_name": "22.4",
"version_value": "22.4R2-S1-EVO, 22.4R3-EVO"
}
]
}
}
]
},
"vendor_name": "Juniper Networks"
}
]
}
},
"configuration": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eNonstop Active Routing is enabled using the following configuration:\u003c/p\u003e \u003ctt\u003e[edit chassis redundancy]\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003egraceful-switchover;\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003e\u003cbr\u003e[edit routing-options]\u003cbr\u003e\u003c/tt\u003e\u003ctt\u003enonstop-routing;\u003c/tt\u003e"
}
],
"value": "Nonstop Active Routing is enabled using the following configuration:\n\n [edit chassis redundancy]\ngraceful-switchover;\n\n[edit routing-options]\nnonstop-routing;"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\n\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\n\nNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\nThis issue affects:\n\nJuniper Networks Junos OS:\n\n\n\n * All versions prior to 20.4R3-S8;\n * 21.1 versions 21.1R1 and later;\n * 21.2 versions prior to 21.2R3-S6;\n * 21.3 versions prior to 21.3R3-S5;\n * 21.4 versions prior to 21.4R3-S5;\n * 22.1 versions prior to 22.1R3-S4;\n * 22.2 versions prior to 22.2R3-S2;\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\n * 22.4 versions prior to 22.4R2-S1, 22.4R3.\n\n\n\n\nJuniper Networks Junos OS Evolved\n\n\n\n * All versions prior to 20.4R3-S8-EVO;\n * 21.1 versions 21.1R1-EVO and later;\n * 21.2 versions prior to 21.2R3-S6-EVO;\n * 21.3 versions prior to 21.3R3-S5-EVO;\n * 21.4 versions prior to 21.4R3-S5-EVO;\n * 22.1 versions prior to 22.1R3-S4-EVO;\n * 22.2 versions prior to 22.2R3-S2-EVO;\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\n\n\n\n\n\n\n"
}
]
},
"exploit": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eJuniper SIRT is not aware of any malicious exploitation of this vulnerability.\u003c/p\u003e"
}
],
"value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\n\n"
}
],
"generator": {
"engine": "Vulnogram 0.1.0-av217"
},
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"cweId": "CWE-755",
"lang": "eng",
"value": "CWE-755 Improper Handling of Exceptional Conditions"
}
]
},
{
"description": [
{
"lang": "eng",
"value": "Denial of Service (DoS)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://supportportal.juniper.net/JSA73150",
"refsource": "MISC",
"url": "https://supportportal.juniper.net/JSA73150"
}
]
},
"solution": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe following software releases have been updated to resolve this specific issue: \u003c/p\u003e\u003cp\u003eJunos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S1, 22.4R3, 23.2R1, and all subsequent releases.\u003c/p\u003e\u003cp\u003eJunos OS Evolved: 20.4R3-S8-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S2-EVO, 22.3R2-S2-EVO, 22.3R3-S1-EVO, 22.4R2-S1-EVO, 22.4R3-EVO, 23.2R1-EVO, and all subsequent releases.\u003c/p\u003e"
}
],
"value": "The following software releases have been updated to resolve this specific issue: \n\nJunos OS: 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S1, 22.4R3, 23.2R1, and all subsequent releases.\n\nJunos OS Evolved: 20.4R3-S8-EVO, 21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S2-EVO, 22.3R2-S2-EVO, 22.3R3-S1-EVO, 22.4R2-S1-EVO, 22.4R3-EVO, 23.2R1-EVO, and all subsequent releases.\n\n"
}
],
"source": {
"advisory": "JSA73150",
"defect": [
"1736029"
],
"discovery": "EXTERNAL"
},
"work_around": [
{
"lang": "en",
"value": "Current operational and security best practices, such as limiting the AS PATH length, should mitigate risk of this issue.\n\nBelow is an example configuration to limit AS PATH to 30 entries:\n\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 from protocol bgp\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 from as-path 31as\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 term more-than-30 then reject\nset groups BASE-POLICY policy-options policy-statement MaxAS-Limit-30 then accept\nset groups BASE-POLICY policy-options policy-statement Customer-IN term MaxAS-Limit from policy MaxAS-Limit-30\nset groups BASE-BGP protocols bgp group \u003c*-CUSTOMER\u003e import Customer-IN\nset groups BASE-PREFIX-LISTS policy-options as-path 31as \".{31,}\""
}
]
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E3A96966-5060-4139-A124-D4E2C879FD6C",
"versionEndExcluding": "20.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
"matchCriteriaId": "3D361B23-A3C2-444B-BEB8-E231DA950567",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "037BA01C-3F5C-4503-A633-71765E9EF774",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "C54B047C-4B38-40C0-9855-067DCF7E48BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "38984199-E332-4A9C-A4C0-78083D052E15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "AA6526FB-2941-4D18-9B2E-472AD5A62A53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
"matchCriteriaId": "09876787-A40A-4340-9C12-8628C325353B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "41615104-C17E-44DA-AB0D-6E2053BD4EF4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "1981DE38-36B5-469D-917E-92717EE3ED53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "AFA68ACD-AAE5-4577-B734-23AAF77BC85A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "65948ABC-22BB-46D5-8545-0806EDB4B86E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "283E41CB-9A90-4521-96DC-F31AA592CFD8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*",
"matchCriteriaId": "14EEA504-CBC5-4F6F-889A-D505EC4BB5B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*",
"matchCriteriaId": "977DEF80-0DB5-4828-97AC-09BB3111D585",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "625BA7E6-D2AD-4A48-9B94-24328BE5B06A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "F462F4E3-762C-429F-8D25-5521100DD37C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*",
"matchCriteriaId": "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "689FE1AE-7A85-4FB6-AB02-E732F23581B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "79E56DAC-75AD-4C81-9835-634B40C15DA6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*",
"matchCriteriaId": "A0040FE2-7ECD-4755-96CE-E899BA298E0C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "076AB086-BB79-4583-AAF7-A5233DFB2F95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "72E2DDF6-01DF-4880-AB60-B3DA3281E88D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "54010163-0810-4CF5-95FE-7E62BC6CA4F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "5C1C3B09-3800-493E-A319-57648305FE6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "4BFDCC2B-FAB5-4164-8D70-28E4DFF052AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
"matchCriteriaId": "216E7DDE-453D-481F-92E2-9F8466CDDA3F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "A52AF794-B36B-43A6-82E9-628658624B0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "3998DC76-F72F-4452-9150-652140B113EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "36ED4552-2420-45F9-B6E4-6DA2B2B12870",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
"matchCriteriaId": "C28A14E7-7EA0-4757-9764-E39A27CFDFA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "4A43752D-A4AF-4B4E-B95B-192E42883A5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "42986538-E9D0-4C2E-B1C4-A763A4EE451B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
"matchCriteriaId": "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "E596ABD9-6ECD-48DC-B770-87B7E62EA345",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "71745D02-D226-44DC-91AD-678C85F5E6FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "39E44B09-7310-428C-8144-AE9DB0484D1F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "53938295-8999-4316-9DED-88E24D037852",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "2307BF56-640F-49A8-B060-6ACB0F653A61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
"matchCriteriaId": "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
"matchCriteriaId": "CC78A4CB-D617-43FC-BB51-287D2D0C44ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "30FF67F8-1E3C-47A8-8859-709B3614BA6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "0C7C507E-C85E-4BC6-A3B0-549516BAB524",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
"matchCriteriaId": "6514CDE8-35DC-469F-89A3-078684D18F7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "4624565D-8F59-44A8-B7A8-01AD579745E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
"matchCriteriaId": "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "255B6F20-D32F-42C1-829C-AE9C7923558A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "90AE30DB-C448-4FE9-AC11-FF0F27CDA227",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "93F324AE-65D3-4CFC-AEAB-898CE1BD05CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "3CCBB2F4-F05B-4CC5-9B1B-ECCB798D0483",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
"matchCriteriaId": "79ED3CE8-CC57-43AB-9A26-BBC87816062D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "9962B01C-C57C-4359-9532-676AB81CE8B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "62178549-B679-4902-BFDB-2993803B7FCE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "9AD697DF-9738-4276-94ED-7B9380CD09F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "09FF5818-0803-4646-A386-D7C645EE58A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "2229FA59-EB24-49A2-85CE-F529A8DE6BA7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
"matchCriteriaId": "0CB280D8-C5D8-4B51-A879-496ACCDE4538",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "5F3F54F1-75B3-400D-A735-2C27C8CEBE79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "0A5B196A-2AF1-4AE5-9148-A75A572807BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "3B457616-2D91-4913-9A7D-038BBF8F1F66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "3F96EBE9-2532-4E35-ABA5-CA68830476A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "B4D936AE-FD74-4823-A824-2D9F24C25BFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "E117E493-F4E1-4568-88E3-F243C74A2662",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
"matchCriteriaId": "01E3E308-FD9C-4686-8C35-8472A0E99F0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "3683A8F5-EE0E-4936-A005-DF7F6B75DED3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "1B615DBA-8C53-41D4-B264-D3EED8578471",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
"matchCriteriaId": "B3124DD0-9E42-4896-9060-CB7DD07FC342",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "44F6FD6C-03AF-4D2C-B411-A753DE12A2DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "D49FFB60-BA71-4902-9404-E67162919ADC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "EFF72FCA-C440-4D43-9BDB-F712DB413717",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "E949B21B-AD62-4022-9088-06313277479E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "8D862E6F-0D01-4B25-8340-888C30F75A2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "2F28F73E-8563-41B9-A313-BBAAD5B57A67",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
"matchCriteriaId": "E37D4694-C80B-475E-AB5B-BB431F59C5E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "5EC0D2D2-4922-4675-8A2C-57A08D7BE334",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "9EC91F9D-DEDA-46B4-A39F-59A2CDB86C2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*",
"matchCriteriaId": "591AA3E6-62A2-4A1A-A04C-E808F71D8B6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "786F993E-32CB-492A-A7CC-A7E4F48EA8B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
"matchCriteriaId": "19519212-51DD-4448-B115-8A20A40192CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "5CC9909E-AE9F-414D-99B1-83AA04D5297B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "FDE9E767-4713-4EA2-8D00-1382975A4A15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*",
"matchCriteriaId": "59DDA54E-6845-47EB-AE3C-5EC6BD33DFA7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "574730B0-56C8-4A03-867B-1737148ED9B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:*",
"matchCriteriaId": "FB4C0FBF-8813-44E5-B71A-22CBAA603E2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "28E42A41-7965-456B-B0AF-9D3229CE4D4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "CB1A77D6-D3AD-481B-979C-8F778530B175",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "3A064B6B-A99B-4D8D-A62D-B00C7870BC30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "40813417-A938-4F74-A419-8C5188A35486",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:23.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "0038F142-6F5E-476D-A1EC-E977FD30F155",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "4B3B2FE1-C228-46BE-AC76-70C2687050AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "F1B16FF0-900F-4AEE-B670-A537139F6909",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0F41A7DF-2B27-4E2E-ABFC-E0510A028199",
"versionEndExcluding": "20.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*",
"matchCriteriaId": "247FB9DF-7EC0-4298-B27C-3235D141C1D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "C9C8866D-162F-4C9B-8167-2FBA25410368",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "F85E5BC7-8607-4330-AA72-2273D32F8604",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "878C81C9-A418-4A21-8FDB-2116A992679C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "7451A671-A3CC-4904-8D45-947B1D3783C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "0108AD20-EAE6-41D1-AE48-254C46B5388A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "44FBCA6F-EB05-4EE4-85FD-944BDAF7D81B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*",
"matchCriteriaId": "E554FD12-FE69-44D1-B2C9-4382F8CA4456",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*",
"matchCriteriaId": "E0C1D53E-70BE-4246-89ED-1074C8C70747",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "B39DDCF8-BB68-49F4-8AAF-AE25C9C13AC1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "B38A90A9-B739-49BE-8845-9ABF846CCC5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "AAE56A7C-BA26-405F-A640-C43AF78B0A3B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "683D8EED-9F26-41E7-B69C-FE198225A8F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "8979C85C-87DD-42B1-9CCC-BC3F7007C600",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s6:*:*:*:*:*:*",
"matchCriteriaId": "5BDD5111-1BC2-456B-8A31-F2D252DF613C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s7:*:*:*:*:*:*",
"matchCriteriaId": "89B9BF7C-525C-4819-B80D-9B5F240F9878",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*",
"matchCriteriaId": "52C3552E-798F-4719-B38D-F74E34EAAA40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "AE674DD3-3590-4434-B144-5AD7EB5F039D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "0099BDA9-9D4B-4D6C-8234-EFD9E8C63476",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*",
"matchCriteriaId": "D8729BC1-FB09-4E6D-A5D5-8BDC589555B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*",
"matchCriteriaId": "9D72C3DF-4513-48AC-AAED-C1AADF0794E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "8C583289-96C4-4451-A320-14CA1C390819",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "FA43782E-0719-496E-9237-E1ABD3C4C664",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "78897DD2-E161-4191-94FF-7400FB612DF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*",
"matchCriteriaId": "620B0CDD-5566-472E-B96A-31D2C12E3120",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "3EA3DC63-B290-4D15-BEF9-21DEF36CA2EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "7E1E57AF-979B-4022-8AD6-B3558E06B718",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "144730FB-7622-4B3D-9C47-D1B7A7FB7EB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*",
"matchCriteriaId": "7BA246F0-154E-4F44-A97B-690D22FA73DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "25D6C07C-F96E-4523-BB54-7FEABFE1D1ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "2B70C784-534B-4FAA-A5ED-3709656E2B97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*",
"matchCriteriaId": "60448FFB-568E-4280-9261-ADD65244F31A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "2B770C52-7E3E-4B92-9138-85DEC56F3B22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "E88AC378-461C-4EFA-A04B-5786FF21FE03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "3B0AFB30-81DC-465C-9F63-D1B15EA4809A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "2035F0AC-29E7-478A-A9D0-BAA3A88B3413",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s5:*:*:*:*:*:*",
"matchCriteriaId": "C34ABD4B-B045-4046-9641-66E3B2082A25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*",
"matchCriteriaId": "4EC38173-44AB-43D5-8C27-CB43AD5E0B2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*",
"matchCriteriaId": "5A4DD04A-DE52-46BE-8C34-8DB47F7500F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "FEE0E145-8E1C-446E-90ED-237E3B9CAF47",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*",
"matchCriteriaId": "0F26369D-21B2-4C6A-98C1-492692A61283",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "24003819-1A6B-4BDF-B3DF-34751C137788",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "BF8D332E-9133-45B9-BB07-B33C790F737A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3:*:*:*:*:*:*",
"matchCriteriaId": "3E2A4377-D044-4E43-B6CC-B753D7F6ABD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "8DAEC4F4-5748-4D36-A72B-4C62A0A30E38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "C76DA7A5-9320-4E21-96A2-ACE70803A1CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "703C73EB-2D63-4D4F-8129-239AE1E96B2B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.3:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "8F67CE3C-3A06-487C-90DE-D5B3B1EC08A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*",
"matchCriteriaId": "2E907193-075E-45BC-9257-9607DB790D71",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "8B73A41D-3FF5-4E53-83FF-74DF58E0D6C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "CEDF46A8-FC3A-4779-B695-2CA11D045AEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "39809219-9F87-4583-9DAD-9415DD320B36",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "DB299492-A919-4EBA-A62A-B3CF02FC0A95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "74ED0939-D5F8-4334-9838-40F29DE3597F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "C6937069-8C19-4B01-8415-ED7E9EAE2CE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3:*:*:*:*:*:*",
"matchCriteriaId": "97DB6DD5-F5DD-4AE1-AF2F-8DB9E18FF882",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "21DF05B8-EF7E-422F-8831-06904160714C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "492FCE45-68A1-4378-85D4-C4034FE0D836",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "522114CC-1505-4205-B4B8-797DE1BD833B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:21.4:r3-s4:*:*:*:*:*:*",
"matchCriteriaId": "C9D664AB-0FA7-49C7-B6E1-69C77652FBEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*",
"matchCriteriaId": "750FE748-82E7-4419-A061-2DEA26E35309",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "236E23E5-8B04-4081-9D97-7300DF284000",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "5FC96EA7-90A7-4838-B95D-60DBC88C7BC7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*",
"matchCriteriaId": "97541867-C52F-40BB-9AAE-7E87ED23D789",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "85CF6664-E35A-4E9B-95C0-CDC91F7F331A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3:*:*:*:*:*:*",
"matchCriteriaId": "E048A05D-882F-4B1C-BA32-3BBA3FEA31A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "47E8D51D-1424-4B07-B036-E3E195F21AC2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s2:*:*:*:*:*:*",
"matchCriteriaId": "6F3C82ED-5728-406F-ACF6-D7411B0AB6C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.1:r3-s3:*:*:*:*:*:*",
"matchCriteriaId": "1475A58F-1515-4492-B5A3-BE40C30E5B14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "D77A072D-350A-42F2-8324-7D3AC1711BF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "83AE395C-A651-4568-88E3-3600544BF799",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*",
"matchCriteriaId": "B3BE1FD4-DAD9-4357-A2E9-20E5826B0D5C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "81CC3480-4B65-4588-8D46-FA80A8F6D143",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s2:*:*:*:*:*:*",
"matchCriteriaId": "F7E76F5F-DB37-4B7F-9247-3CEB4EBD7696",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r3:*:*:*:*:*:*",
"matchCriteriaId": "C63DBEE5-B0C2-498F-A672-B6596C89B0A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.2:r3-s1:*:*:*:*:*:*",
"matchCriteriaId": "9370C46D-3AA1-4562-B67F-DF6EA10F209B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1:*:*:*:*:*:*",
"matchCriteriaId": "433631CA-3AC4-4D66-9B46-AEA4209347F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "6E4CD8AD-277A-4FC5-A102-3E151060C216",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "4BC09BAC-83E7-48CE-B571-ED49277B2987",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r2:*:*:*:*:*:*",
"matchCriteriaId": "FA4481D2-F693-48A5-8DBC-E86430987A25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.3:r2-s1:*:*:*:*:*:*",
"matchCriteriaId": "136CA584-2475-4A14-9771-F367180201D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1:*:*:*:*:*:*",
"matchCriteriaId": "93887799-F62C-4A4A-BCF5-004D0B4D4154",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "62C473D2-2612-4480-82D8-8A24D0687BBD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.4:r1-s2:*:*:*:*:*:*",
"matchCriteriaId": "7FB4C5CA-A709-4B13-A9E0-372098A72AD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:22.4:r2:*:*:*:*:*:*",
"matchCriteriaId": "04CE952D-E3C1-4B34-9E65-EC52BFE887AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:-:*:*:*:*:*:*",
"matchCriteriaId": "6DEAA7FD-385F-4221-907E-65ABC16BE4BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1:*:*:*:*:*:*",
"matchCriteriaId": "DDEC008A-3137-48D1-8ABC-6DB0EFC40E50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:r1-s1:*:*:*:*:*:*",
"matchCriteriaId": "558D234D-BC50-415F-86D6-8E19D6C3ACE0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\nAn Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.\n\nThis issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.\n\nNote: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.\nThis issue affects:\n\nJuniper Networks Junos OS:\n\n\n\n * All versions prior to 20.4R3-S8;\n * 21.1 versions 21.1R1 and later;\n * 21.2 versions prior to 21.2R3-S6;\n * 21.3 versions prior to 21.3R3-S5;\n * 21.4 versions prior to 21.4R3-S5;\n * 22.1 versions prior to 22.1R3-S4;\n * 22.2 versions prior to 22.2R3-S2;\n * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1;\n * 22.4 versions prior to 22.4R2-S1, 22.4R3.\n\n\n\n\nJuniper Networks Junos OS Evolved\n\n\n\n * All versions prior to 20.4R3-S8-EVO;\n * 21.1 versions 21.1R1-EVO and later;\n * 21.2 versions prior to 21.2R3-S6-EVO;\n * 21.3 versions prior to 21.3R3-S5-EVO;\n * 21.4 versions prior to 21.4R3-S5-EVO;\n * 22.1 versions prior to 22.1R3-S4-EVO;\n * 22.2 versions prior to 22.2R3-S2-EVO;\n * 22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;\n * 22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.\n\n\n\n\n\n\n"
},
{
"lang": "es",
"value": "Una vulnerabilidad de Improper Handling of Exceptional Conditions en el procesamiento AS PATH de Juniper Networks Junos OS y Junos OS Evolved permite a un atacante enviar un mensaje de actualizaci\u00f3n de BGP con un AS PATH que contiene una gran cantidad de AS de 4 bytes, lo que lleva a una Denegaci\u00f3n de Servicio ( DoS). La recepci\u00f3n y el procesamiento continuo de estas actualizaciones de BGP crear\u00e1n una condici\u00f3n sostenida de Denegaci\u00f3n de Servicio (DoS). Este problema se produce cuando el router tiene habilitado Non-Stop Routing (NSR), tiene un vecino BGP que no es de 4 bytes con capacidad AS, recibe un mensaje de actualizaci\u00f3n de BGP con un prefijo que incluye un AS PATH largo que contiene una gran cantidad de 4 bytes. AS de bytes y tiene que anunciar el prefijo hacia el vecino BGP que no es compatible con AS de 4 bytes.\nNota: NSR no es compatible con la serie SRX y, por lo tanto, no se ve afectado por esta vulnerabilidad. \nEste problema afecta a: \nJuniper Networks Junos OS: * Todas las versiones anteriores a 20.4R3-S8; * 21.1 versiones 21.1R1 y posteriores; * Versiones 21.2 anteriores a 21.2R3-S6; * Versiones 21.3 anteriores a 21.3R3-S5; * Versiones 21.4 anteriores a 21.4R3-S5; * Versiones 22.1 anteriores a 22.1R3-S4; * Versiones 22.2 anteriores a 22.2R3-S2; * Versiones 22.3 anteriores a 22.3R2-S2, 22.3R3-S1; * Versiones 22.4 anteriores a 22.4R2-S1, 22.4R3; * Versiones 23.2 anteriores a 23.2R2. \nJuniper Networks Junos OS Evolved * Todas las versiones anteriores a 20.4R3-S8-EVO; * 21.1 versiones 21.1R1-EVO y posteriores; * Versiones 21.2 anteriores a 21.2R3-S6-EVO; * Versiones 21.3 anteriores a 21.3R3-S5-EVO; * Versiones 21.4 anteriores a 21.4R3-S5-EVO; * Versiones 22.1 anteriores a 22.1R3-S4-EVO; * Versiones 22.2 anteriores a 22.2R3-S2-EVO; * Versiones 22.3 anteriores a 22.3R2-S2-EVO, 22.3R3-S1-EVO; * Versiones 22.4 anteriores a 22.4R2-S1-EVO, 22.4R3-EVO; * Versiones 23.2 anteriores a 23.2R2-EVO."
}
],
"id": "CVE-2023-44186",
"lastModified": "2024-03-06T00:15:52.390",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "sirt@juniper.net",
"type": "Secondary"
}
]
},
"published": "2023-10-11T21:15:09.890",
"references": [
{
"source": "sirt@juniper.net",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"url": "https://supportportal.juniper.net/JSA73150"
}
],
"sourceIdentifier": "sirt@juniper.net",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-755"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-755"
}
],
"source": "sirt@juniper.net",
"type": "Secondary"
}
]
}
}
}
}
WID-SEC-W-2023-2636
Vulnerability from csaf_certbund - Published: 2023-10-11 22:00 - Updated: 2023-10-12 22:00Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgemäßer impelmentierter Sicherheitsprüfungen, unsachgemäßer Eingabevalidierungen, ungeprüfter Rückgabewerte und unsachgemäßer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Juniper EX Series 4100
Juniper / EX Series
|
cpe:/h:juniper:ex:4100
|
— | |
|
Juniper JUNOS PTX10003
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10003
|
— | |
|
Juniper EX Series 4400
Juniper / EX Series
|
cpe:/h:juniper:ex:4400
|
— | |
|
Juniper JUNOS PTX10016
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10016
|
— | |
|
Juniper MX Series
Juniper
|
cpe:/h:juniper:mx:-
|
— | |
|
Juniper JUNOS
Juniper / JUNOS
|
cpe:/o:juniper:junos:-
|
— | |
|
Juniper EX Series 4000
Juniper / EX Series
|
cpe:/h:juniper:ex:4000
|
— | |
|
Juniper JUNOS PTX10001
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10001
|
— | |
|
Juniper EX Series 2300
Juniper / EX Series
|
cpe:/h:juniper:ex:ex2300
|
— | |
|
Juniper EX Series 4600
Juniper / EX Series
|
cpe:/h:juniper:ex:ex4600
|
— | |
|
Juniper JUNOS Evolved
Juniper / JUNOS
|
cpe:/o:juniper:junos:evolved
|
— | |
|
Juniper QFX Series 5000
Juniper
|
cpe:/h:juniper:qfx:qfx5000
|
— | |
|
Juniper JUNOS PTX Series
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx_series
|
— | |
|
Juniper EX Series 3400
Juniper / EX Series
|
cpe:/h:juniper:ex:ex3400
|
— | |
|
Juniper JUNOS PTX10004
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10004
|
— | |
|
Juniper JUNOS PTX10008
Juniper / JUNOS
|
cpe:/o:juniper:junos:ptx10008
|
— | |
|
Juniper SRX Series
Juniper
|
cpe:/h:juniper:srx_service_gateways:-
|
— |
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://kb.juniper.net/InfoCenter/index?page=cont… | external |
| https://supportportal.juniper.net/s/global-search… | external |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "JUNOS ist das \"Juniper Network Operating System\", das in Juniper Appliances verwendet wird.\r\nDie Switches der QFX-Serie von Juniper sichern und automatisieren Netzwerke in Rechenzentren. \r\nBei den Switches der Juniper EX-Serie handelt es sich um Access- und Aggregations-/Core-Layer-Switches.\r\nDie Juniper MX-Serie ist eine Produktfamilie von Routern.\r\nSRX Series Services Gateways ist ein Next-Generation Anti-Threat Firewall von Juniper.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Juniper Produkten ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Juniper Appliance\n- BIOS/Firmware",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-2636 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2636.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-2636 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2636"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73153"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73154"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73148"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73157"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73158"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73174"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73172"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73156"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73176"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73530"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73155"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73152"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73145"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73165"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73151"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73160"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73162"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73164"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73168"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73169"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73146"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73140"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73141"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73147"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73167"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73163"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73177"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73149"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73150"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73170"
},
{
"category": "external",
"summary": "Juniper Security Advisory vom 2023-10-11",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA73171"
},
{
"category": "external",
"summary": "Juniper Security Advisories vom 2023-10-11",
"url": "https://supportportal.juniper.net/s/global-search/%40uri?language=en_US#sort=%40sfcec_community_publish_date_formula__c%20descending\u0026numberOfResults=100\u0026f:ctype=%5BSecurity%20Advisories%5D"
}
],
"source_lang": "en-US",
"title": "Juniper Patchday Oktober 2023",
"tracking": {
"current_release_date": "2023-10-12T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:59:49.596+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2023-2636",
"initial_release_date": "2023-10-11T22:00:00.000+00:00",
"revision_history": [
{
"date": "2023-10-11T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-10-12T22:00:00.000+00:00",
"number": "2",
"summary": "CVE Nummern CVE-2023-44176, CVE-2023-44177, CVE-2023-44178 nachgetragen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Juniper EX Series 4600",
"product": {
"name": "Juniper EX Series 4600",
"product_id": "T021598",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:ex:ex4600"
}
}
},
{
"category": "product_name",
"name": "Juniper EX Series 2300",
"product": {
"name": "Juniper EX Series 2300",
"product_id": "T021599",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:ex:ex2300"
}
}
},
{
"category": "product_name",
"name": "Juniper EX Series 3400",
"product": {
"name": "Juniper EX Series 3400",
"product_id": "T021601",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:ex:ex3400"
}
}
},
{
"category": "product_name",
"name": "Juniper EX Series 4000",
"product": {
"name": "Juniper EX Series 4000",
"product_id": "T030473",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:ex:4000"
}
}
},
{
"category": "product_name",
"name": "Juniper EX Series 4100",
"product": {
"name": "Juniper EX Series 4100",
"product_id": "T030475",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:ex:4100"
}
}
},
{
"category": "product_name",
"name": "Juniper EX Series 4400",
"product": {
"name": "Juniper EX Series 4400",
"product_id": "T030476",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:ex:4400"
}
}
}
],
"category": "product_name",
"name": "EX Series"
},
{
"branches": [
{
"category": "product_name",
"name": "Juniper JUNOS Evolved",
"product": {
"name": "Juniper JUNOS Evolved",
"product_id": "T018886",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:evolved"
}
}
},
{
"category": "product_name",
"name": "Juniper JUNOS PTX Series",
"product": {
"name": "Juniper JUNOS PTX Series",
"product_id": "T023853",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:ptx_series"
}
}
},
{
"category": "product_name",
"name": "Juniper JUNOS PTX10004",
"product": {
"name": "Juniper JUNOS PTX10004",
"product_id": "T028578",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:ptx10004"
}
}
},
{
"category": "product_name",
"name": "Juniper JUNOS PTX10008",
"product": {
"name": "Juniper JUNOS PTX10008",
"product_id": "T028579",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:ptx10008"
}
}
},
{
"category": "product_name",
"name": "Juniper JUNOS PTX10016",
"product": {
"name": "Juniper JUNOS PTX10016",
"product_id": "T028580",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:ptx10016"
}
}
},
{
"category": "product_name",
"name": "Juniper JUNOS",
"product": {
"name": "Juniper JUNOS",
"product_id": "T030471",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:-"
}
}
},
{
"category": "product_name",
"name": "Juniper JUNOS PTX10001",
"product": {
"name": "Juniper JUNOS PTX10001",
"product_id": "T030472",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:ptx10001"
}
}
},
{
"category": "product_name",
"name": "Juniper JUNOS PTX10003",
"product": {
"name": "Juniper JUNOS PTX10003",
"product_id": "T030474",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:ptx10003"
}
}
}
],
"category": "product_name",
"name": "JUNOS"
},
{
"category": "product_name",
"name": "Juniper MX Series",
"product": {
"name": "Juniper MX Series",
"product_id": "918766",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:mx:-"
}
}
},
{
"category": "product_name",
"name": "Juniper QFX Series 5000",
"product": {
"name": "Juniper QFX Series 5000",
"product_id": "T021597",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:qfx:qfx5000"
}
}
},
{
"category": "product_name",
"name": "Juniper SRX Series",
"product": {
"name": "Juniper SRX Series",
"product_id": "T021593",
"product_identification_helper": {
"cpe": "cpe:/h:juniper:srx_service_gateways:-"
}
}
}
],
"category": "vendor",
"name": "Juniper"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-44204",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44204"
},
{
"cve": "CVE-2023-44203",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44203"
},
{
"cve": "CVE-2023-44202",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44202"
},
{
"cve": "CVE-2023-44201",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44201"
},
{
"cve": "CVE-2023-44199",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44199"
},
{
"cve": "CVE-2023-44198",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44198"
},
{
"cve": "CVE-2023-44197",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44197"
},
{
"cve": "CVE-2023-44196",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44196"
},
{
"cve": "CVE-2023-44195",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44195"
},
{
"cve": "CVE-2023-44194",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44194"
},
{
"cve": "CVE-2023-44193",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44193"
},
{
"cve": "CVE-2023-44192",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44192"
},
{
"cve": "CVE-2023-44191",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44191"
},
{
"cve": "CVE-2023-44190",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44190"
},
{
"cve": "CVE-2023-44189",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44189"
},
{
"cve": "CVE-2023-44188",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44188"
},
{
"cve": "CVE-2023-44187",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44187"
},
{
"cve": "CVE-2023-44186",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44186"
},
{
"cve": "CVE-2023-44185",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44185"
},
{
"cve": "CVE-2023-44184",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44184"
},
{
"cve": "CVE-2023-44183",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44183"
},
{
"cve": "CVE-2023-44182",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44182"
},
{
"cve": "CVE-2023-44181",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44181"
},
{
"cve": "CVE-2023-44178",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44178"
},
{
"cve": "CVE-2023-44177",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44177"
},
{
"cve": "CVE-2023-44176",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44176"
},
{
"cve": "CVE-2023-44175",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-44175"
},
{
"cve": "CVE-2023-36843",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-36843"
},
{
"cve": "CVE-2023-36841",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-36841"
},
{
"cve": "CVE-2023-36839",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-36839"
},
{
"cve": "CVE-2023-22392",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Juniper JUNOS und JUNOS Evolved auf verschiedenen Hardware-Plattformen wie SRX, MX, PTX und QFX. Betroffen sind Komponenten wie NTP, der Routing-Protokoll-Daemon, Storm Control, der Management-Daemon, die Packet Forwarding Engine, das NETCONF Management Protocol, die gNMI-Schnittstellen und die J-Web User Interfaces. Die Fehler bestehen u.a. aufgrund einer Erreichbarkeitsbehauptung, unsachgem\u00e4\u00dfer impelmentierter Sicherheitspr\u00fcfungen, unsachgem\u00e4\u00dfer Eingabevalidierungen, ungepr\u00fcfter R\u00fcckgabewerte und unsachgem\u00e4\u00dfer Behandlung von Ausnahmebedingungen. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszul\u00f6sen und seine Privilegien zu erweitern. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T030475",
"T030474",
"T030476",
"T028580",
"918766",
"T030471",
"T030473",
"T030472",
"T021599",
"T021598",
"T018886",
"T021597",
"T023853",
"T021601",
"T028578",
"T028579",
"T021593"
]
},
"release_date": "2023-10-11T22:00:00.000+00:00",
"title": "CVE-2023-22392"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.