An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker who is able to connect to a specific open IPv4 port, which in affected releases should otherwise be unreachable, to cause the CPU to consume all resources as more traffic is sent to the port to create a denial of service (DoS) condition. Continued receipt and processing of these packets will create a sustained denial of service (DoS) condition. This issue affects: Juniper Networks Junos OS Evolved 20.4 versions prior to 20.4R3-S2-EVO; 21.1 versions prior to 21.1R3-S1-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO; 21.4 versions prior to 21.4R2-EVO. This issue does not affect Junos OS.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An uncontrolled memory allocation vulnerability leading to a heap-based buffer overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial of Service (DoS). The device must be configured with storm control profiling limiting the number of unknown broadcast, multicast, or unicast traffic to be vulnerable to this issue.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11213 advisory. An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a kernel crash, causing the device to restart, leading to a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects systems with IPv6 configured. Devices with only IPv4 configured are not vulnerable to this issue. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11229 advisory.

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Service (DoS) by sending genuine BGP flowspec packets which cause an FPC heap memory leak. Once having run out of memory the FPC will crash and restart along with a core dump. Continued receipted of these packets will create a sustained Denial of Service (DoS) condition. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69494 advisory.

  - Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets     received on the management interface (em0) but not destined to the device, may be improperly forwarded to     an egress interface, instead of being discarded. Such traffic being sent by a client may appear genuine,     but is non-standard in nature and should be considered as potentially malicious. This issue affects:
    Juniper Networks Junos OS on EX4650 Series: All versions prior to 19.1R3-S8; 19.2 versions prior to     19.2R3-S5; 19.3 versions prior to 19.3R3-S5; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to     20.1R3-S3; 20.2 versions prior to 20.2R3-S4; 20.3 versions prior to 20.3R3-S3; 20.4 versions prior to     20.4R3-S2; 21.1 versions prior to 21.1R3-S1; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2;
    21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R1. (CVE-2022-22186)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11212 advisory.

  - A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to     crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with     other system events outside the attacker's control, leading to a Denial of Service (DoS) condition. Continued     execution of the CLI command, under precise conditions, could create a sustained Denial of Service (DoS) condition.     This issue affects all Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO on PTX10003 and PTX10008     platforms. Junos OS is not affected by this vulnerability. (CVE-2021-0298)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69503 advisory.

  - An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon (rpd) of Juniper     Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to     cause a Denial of Service (DoS). Continued execution of this command might cause a sustained Denial of     Service condition. If BGP rib sharding is configured and a certain CLI command is executed the rpd process     can crash. During the rpd crash and restart, the routing protocols might be impacted and traffic     disruption might be seen due to the loss of routing information. This issue affects: Juniper Networks     Junos OS 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R3;
    21.2 versions prior to 21.2R2. Juniper Networks Junos OS Evolved 20.4 versions prior to 20.4R3-EVO; 21.1     versions prior to 21.1R3-EVO; 21.2 versions prior to 21.2R2-EVO. This issue does not affect: Juniper     Networks Junos OS versions prior to 20.3R1. Juniper Networks Junos OS Evolved versions prior to     20.3R1-EVO. (CVE-2022-22193)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69505 advisory.

  - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks     Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allows an unauthenticated, network-based attacker to cause     a Denial of Service (DoS). Continued receipt of these crafted packets will cause a sustained Denial of Service     condition. This issue affects Juniper Networks Junos OS Evolved all versions prior to 20.4R2-S3-EVO on PTX10003,     PTX10004, and PTX10008. This issue does not affect: Juniper Networks Junos OS Evolved versions 21.1R1-EVO and     above; Juniper Networks Junos OS. (CVE-2022-22194)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69519 advisory.

  - A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL     that when visited by another user enables the attacker to execute commands with the target's permissions, including     an administrator. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S19; 15.1 versions     prior to 15.1R7-S10; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S10, 18.4R3-S9; 19.1 versions     prior to 19.1R2-S3, 19.1R3-S6; 19.2 versions prior to 19.2R1-S8, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3;     19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior     to 20.3R3; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2; 21.2 versions prior to     21.2R1-S1, 21.2R2.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69493 advisory.

  - A vulnerability in Juniper Networks Junos OS on SRX Series, allows a network-based unauthenticated     attacker to cause a Denial of Service (DoS) by sending a specific fragmented packet to the device,     resulting in a flowd process crash, which is responsible for packet forwarding. Continued receipt and     processing of this specific packet will create a sustained DoS condition. This issue only affects SRX     Series when 'preserve-incoming-fragment-size' feature is enabled. This issue affects Juniper Networks     Junos OS on SRX Series: 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R3-S10; 19.1 versions     prior to 19.1R3-S7; 19.2 versions prior to 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions     prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions     prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions     prior to 21.2R2. This issue does not affect Juniper Networks Junos OS prior to 17.3R1. (CVE-2022-22185)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11239 advisory. On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (RPD) crash and restart, causing a Denial of Service (DoS). Continued receipt and processing of this message will create a sustained Denial of Service (DoS) condition. This issue affects both IBGP and EBGP deployments over IPv4 or IPv6. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11237 advisory. An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11240 advisory.

  - An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices     configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a     specific BGP update which may cause RPKI policy-checks to be bypassed. This, in turn, may allow a spoofed     advertisement to be accepted or propagated. This issue affects: Juniper Networks Junos OS 12.3 versions prior to     12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S7;     17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S3; 18.3     versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to     19.2R2; 19.3 versions prior to 19.3R2. (CVE-2021-31375)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11264 advisory. An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11189 advisory.

  - In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved     devices, configured with ISIS Flexible Algorithm for Segment Routing and sensor-based statistics, a flap     of a ISIS link in the network, can lead to a routing process daemon (RPD) crash and restart, causing a     Denial of Service (DoS). Continued link flaps will create a sustained Denial of Service (DoS) condition.
    This issue affects: Juniper Networks Junos OS: 19.4 versions prior to 19.4R1-S4, 19.4R3-S2; 20.1 versions     prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R2;
    Juniper Networks Junos OS Evolved: 20.3-EVO versions prior to 20.3R2-EVO; 20.4-EVO versions prior to     20.4R2-EVO. This issue does not affect: Juniper Networks Junos OS releases prior to 19.4R1. Juniper     Networks Junos OS Evolved releases prior to 19.4R1-EVO. (CVE-2021-0287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11246 advisory.

  - In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.),     on Juniper Networks Junos OS devices where RADIUS servers are configured for managing subscriber access and a     subscriber is logged in and then requests to logout, the subscriber may be forced into a 'Terminating' state     by an attacker who is able to send spoofed messages appearing to originate from trusted RADIUS server(s) destined     to the device in response to the subscriber's request. These spoofed messages cause the Junos OS General     Authentication Service (authd) daemon to force the broadband subscriber into this 'Terminating' state which the     subscriber will not recover from thereby causing a Denial of Service (DoS) to the endpoint device. Once in the     'Terminating'state, the endpoint subscriber will no longer be able to access the network. Restarting the authd     daemon on the Junos OS device will temporarily clear the subscribers out of the 'Terminating' state. As long as the     attacker continues to send these spoofed packets and subscribers request to be logged out, the subscribers will be     returned to the 'Terminating' state thereby creating a persistent Denial of Service to the subscriber. An indicator     of compromise may be seen by displaying the output of 'show subscribers summary'. The presence of subscribers in     the 'Terminating' state may indicate the issue is occurring. (CVE-2021-31378)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability due to the routing protocol (rdp) daemon not properly validating data properly in BGP update messages. An unauthenticated, remote attacker can exploit this, by sending a malformed BGP update message, to cause the rdp daemon to crash.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability in the Juniper DHCP daemon (jdhcpd). An unauthenticated, adjacent attacker can exploit this, by sending a DHCPv4 packet with specific options to the host, to cause jdhcpd to crash and restart.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11284 advisory.

  - A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks     Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash     and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained     Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP)     invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that     traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to     20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to     21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1. (CVE-2022-22178)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11281 advisory.

  - An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series     allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a     Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of     Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP     messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series     and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions     prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper     Networks Junos OS versions prior to 20.4R1. (CVE-2022-22175)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11293 advisory.

  - ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a     buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings     which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not     a strict requirement, ASN.1 strings that are parsed using OpenSSL's own d2i functions (and other similar     parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will     additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for     applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array     by directly setting the data and length fields in the ASN1_STRING array. This can also happen by using     the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to     assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for     strings that have been directly constructed. Where an application requests an ASN.1 structure to be     printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the     application without NUL terminating the data field, then a read buffer overrun can occur. The same thing     can also occur during name constraints processing of certificates (for example if a certificate has been     directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the     certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the     X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an     application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL     functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack).
    It could also result in the disclosure of private memory contents (such as private keys, or sensitive     plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected     1.0.2-1.0.2y). (CVE-2021-3712)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11261 advisory.

  - An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or     Throttling vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series     and MX Series with SPC3 allows an unauthenticated network attacker to cause latency in transit packet     processing and even packet loss. If transit traffic includes a significant percentage (> 5%) of fragmented     packets which need to be reassembled, high latency or packet drops might be observed. This issue affects     Juniper Networks Junos OS on SRX Series, MX Series with SPC3: All versions prior to 18.2R3; 18.3 versions     prior to 18.3R3; 18.4 versions prior to 18.4R2-S9, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions     prior to 19.2R1-S1, 19.2R2. (CVE-2022-22153)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11280 advisory.

  - A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series     and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and     eventual Denial of Service (DoS) condition. Once the condition occurs, further packet processing will be     impacted, creating a sustained Denial of Service (DoS) condition. The following error logs may be observed     using the show heap command and the device may eventually run out of memory if such packets are received     continuously. Jan 12 12:00:00 device-name fpc0 (buf alloc) failed allocating packet buffer Jan 12 12:00:01     device-name fpc0 (buf alloc) failed allocating packet buffer user@device-name> request pfe execute target     fpc0 timeout 30 command show heap ID Base Total(b) Free(b) Used(b) % Name -- ---------- -----------
    ----------- ----------- --- ----------- 0 246fc1a8 536870488 353653752 183216736 34 Kernel 1 91800000     16777216 12069680 4707536 28 DMA 2 92800000 75497472 69997640 5499832 7 PKT DMA DESC 3 106fc000 335544320     221425960 114118360 34 Bcm_sdk 4 97000000 176160768 200 176160568 99 Packet DMA <<<<<<<<<<<<<< 5 903fffe0     20971504 20971504 0 0 Blob This issue affects Juniper Networks Junos OS on QFX5000 Series, EX4600: 18.3R3     versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to     19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7,     19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S1; 20.2 versions     prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior     to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. This issue does not affect Juniper     Networks Junos OS: Any versions prior to 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to     18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.
    (CVE-2022-22174)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11270 advisory.

  - A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper     Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the     level of any other user logged in via J-Web at this time, potential leading to a full compromise of the     device. This issue affects Juniper Networks Junos OS: All versions prior to 15.1R7-S11; 18.3 versions     prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3,     19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions     prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions     prior to 20.3R3-S1; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2     versions prior to 21.2R1-S1, 21.2R2. (CVE-2022-22162)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11269 advisory.

  - An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an     unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by     sending a flood of traffic to the out-of-band management ethernet port. Continued receipted of a flood     will create a sustained Denial of Service (DoS) condition. Once the flood subsides the system will recover     by itself. An indication that the system is affected by this issue would be that an irq handled by the     fman process is shown to be using a high percentage of CPU cycles like in the following example output:
    user@host> show system processes extensive ... PID USERNAME PRI NICE SIZE RES STATE TIME WCPU COMMAND 31     root -84 -187 0K 16K WAIT 22.2H 56939.26% irq96: fman0 This issue affects Juniper Networks Junos OS: All     versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to     19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7,     19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions     prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1     versions prior to 21.1R2; 21.2 versions prior to 21.2R1-S1, 21.2R2. (CVE-2022-22161)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11277 advisory.

  - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine     (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of     Service (DoS) by sending specific packets over VXLAN which cause the PFE to reset. This issue affects:
    Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2     versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1     versions prior to 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This     issue does not affect versions of Junos OS prior to 19.4R1. (CVE-2022-22171)

  - A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE)     of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service     (DoS) by sending specific packets over VXLAN which cause heap memory to leak and on exhaustion the PFE to     reset. The heap memory utilization can be monitored with the command: user@host> show chassis fpc This     issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior     to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to     20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions     of Junos OS prior to 19.4R1. (CVE-2022-22170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11263 advisory.

  - An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change events in     Juniper Networks Junos OS allows an adjacent attacker to cause a memory leak in the Flexible PIC     Concentrator (FPC) of an ACX5448 router. The continuous flapping of an IPv6 neighbor with specific timing     will cause the FPC to run out of resources, leading to a Denial of Service (DoS) condition. Once the     condition occurs, further packet processing will be impacted, creating a sustained Denial of Service (DoS)     condition, requiring a manual PFE restart to restore service. The following error messages will be seen     after the FPC resources have been exhausted: fpc0 DNX_NH::dnx_nh_tag_ipv4_hw_install(),3135:
    dnx_nh_tag_ipv4_hw_install: BCM L3 Egress create object failed for NH 602 (-14:No resources for     operation), BCM NH Params: unit:0 Port:41, L3_INTF:0 Flags: 0x40 fpc0     DNX_NH::dnx_nh_tag_ipv4_hw_install(),3135: dnx_nh_tag_ipv4_hw_install: BCM L3 Egress create object failed     for NH 602 (-14:No resources for operation), BCM NH Params: unit:0 Port:41, L3_INTF:0 Flags: 0x40 fpc0     DNX_NH::dnx_nh_tag_ipv4_hw_install(),3135: dnx_nh_tag_ipv4_hw_install: BCM L3 Egress create object failed     for NH 602 (-14:No resources for operation), BCM NH Params: unit:0 Port:41, L3_INTF:0 Flags: 0x40 fpc0     DNX_NH::dnx_nh_tag_ipv4_hw_install(),3135: dnx_nh_tag_ipv4_hw_install: BCM L3 Egress create object failed     for NH 602 (-14:No resources for operation), BCM NH Params: unit:0 Port:41, L3_INTF:0 Flags: 0x40 This     issue only affects the ACX5448 router. No other products or platforms are affected by this vulnerability.
    This issue affects Juniper Networks Junos OS on ACX5448: 18.4 versions prior to 18.4R3-S10; 19.1 versions     prior to 19.1R3-S5; 19.2 versions prior to 19.2R1-S8, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6,     19.3R3-S2; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2     versions prior to 20.2R1-S1, 20.2R2. (CVE-2022-22155)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11279 advisory.

  - A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon     (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of     Service (DoS). In a scenario where Public Key Infrastructure (PKI) is used in combination with Certificate     Revocation List (CRL), if the CRL fails to download the memory allocated to store the CRL is not released.
    Repeated occurrences will eventually consume all available memory and lead to an inoperable state of the     affected system causing a DoS. This issue affects Juniper Networks Junos OS: All versions prior to     18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2     versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to     19.4R2-S5, 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions     prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2, 21.1R3; 21.2 versions     prior to 21.2R1-S1, 21.2R2. This issue can be observed by monitoring the memory utilization of the pkid     process via: root@jtac-srx1500-r2003> show system processes extensive | match pki 20931 root 20 0 733M     14352K select 0:00 0.00% pkid which increases over time: root@jtac-srx1500-r2003> show system processes     extensive | match pki 22587 root 20 0 901M 181M select 0:03 0.00% pkid (CVE-2022-22173)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11267 advisory.

  - A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel allows an     attacker to cause a Denial of Service (DoS) by sending crafted genuine packets to a device. During an     attack, the routing protocol daemon (rpd) CPU may reach 100% utilization, yet FPC CPUs forwarding traffic     will operate normally. This attack occurs when the attackers' packets are sent over an IPv4 unicast     routing equal-cost multi-path (ECMP) unilist selection. Continued receipt and processing of these packets     will create a sustained Denial of Service (DoS) condition. An indicator of compromise may be to monitor     NETISR drops in the network with the assistance of JTAC. Please contact JTAC for technical support for     further guidance. This issue affects: Juniper Networks Junos OS 17.3 version 17.3R3-S9 and later versions     prior to 17.3R3-S12; 17.4 version 17.4R3-S3 and later versions prior to 17.4R3-S5; 18.1 version 18.1R3-S11     and later versions prior to 18.1R3-S13; 18.2 version 18.2R3-S6 and later versions; 18.3 version 18.3R3-S4     and later versions prior to 18.3R3-S5; 18.4 version 18.4R3-S5 and later versions prior to 18.4R3-S9; 19.1     version 19.1R3-S3 and later versions prior to 19.1R3-S7. This issue does not affect Juniper Networks Junos     OS versions prior to 17.3R3-S9. This issue does not affect Juniper Networks Junos OS Evolved.
    (CVE-2022-22159)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11265 advisory.

  - A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways     may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized     networks or resources, when 'no-syn-check' is enabled on the device. While JDPI correctly classifies out-     of-state asymmetric TCP flows as the dynamic-application UNKNOWN, this classification is not provided to     the policy module properly and hence traffic continues to use the pre-id-default-policy, which is more     permissive, causing the firewall to allow traffic to be forwarded that should have been denied. This issue     only occurs when 'set security flow tcp-session no-syn-check' is configured on the device. This issue     affects Juniper Networks Junos OS on SRX Series: 18.4 versions prior to 18.4R2-S10, 18.4R3-S10; 19.1     versions prior to 19.1R3-S8; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to     19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to     20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior     to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect Juniper Networks Junos OS     versions prior to 18.4R1. (CVE-2022-22167)

  - A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways     may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized     networks or resources, when 'no-syn-check' is enabled on the device. JDPI incorrectly classifies out-of-     state asymmetric TCP flows as the dynamic-application INCONCLUSIVE instead of UNKNOWN, which is more     permissive, causing the firewall to allow traffic to be forwarded that should have been denied. This issue     only occurs when 'set security flow tcp-session no-syn-check' is configured on the device. This issue     affects Juniper Networks Junos OS on SRX Series: 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1     versions prior to 19.1R2-S3, 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior     to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R2-S5, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2,     20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1,     20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2. This issue does not affect Juniper Networks Junos OS     versions prior to 18.4R1. (CVE-2022-22157)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11271 advisory.

  - An Improper Input Validation vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos     OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service     (DoS). If a device is configured as DHCPv6 local server and persistent storage is enabled, jdhcpd will     crash when receiving a specific DHCPv6 message. This issue affects: Juniper Networks Junos OS All versions     prior to 15.1R7-S11; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2     versions prior to 19.2R1-S8, 19.2R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to     20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to     20.4R3; 21.1 versions prior to 21.1R2; 21.2 versions prior to 21.2R2. (CVE-2022-22163)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11283 advisory.

  - A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS     Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service (DoS) to the     service until it is manually restarted. This issue impacts any version of SNMP  v1,v2, v3 This issue     affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S20; 15.1 versions prior to 15.1R7-S11;
    18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to     19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4     versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to     20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to     21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2. Juniper Networks Junos OS Evolved 21.2     versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO. (CVE-2022-22177)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11289 advisory.

  - curl 7.1.1 to and including 7.75.0 is vulnerable to an Exposure of Private Personal Information to an     Unauthorized Actor by leaking credentials in the HTTP Referer: header. libcurl does not strip off user     credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing     HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second     HTTP request. (CVE-2021-22876)

  - curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a     connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl     can confuse session tickets arriving from the HTTPS proxy but work as if they arrived from the remote     server and then wrongly short-cut the host handshake. When confusing the tickets, a HTTPS proxy can     trick libcurl to use the wrong session ticket resume for the host and thereby circumvent the server TLS     certificate check and make a MITM attack to be possible to perform unnoticed. Note that such a malicious     HTTPS proxy needs to provide a certificate that curl will accept for the MITMed server for an attack to     work - unless curl has been told to ignore the server certificate check. (CVE-2021-22890)

  - curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the     code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected     cipher set was stored in a single static variable in the library, which has the surprising side-effect     that if an application sets up multiple concurrent transfers, the last one that sets the ciphers will     accidentally control the set used by all transfers. In a worst-case scenario, this weakens transport     security significantly. (CVE-2021-22897)

  - curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as     `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a     flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized     data from a stack based buffer to the server, resulting in potentially revealing sensitive internal     information to the server using a clear-text network protocol. (CVE-2021-22898)

  - curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory     being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in     rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at     run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to     the transfer in-memory object for later retrieval when a session ticket arrives. If the connection is used     by multiple transfers (like with a reused HTTP/1.1 connection or multiplexed HTTP/2 connection) that first     transfer object might be freed before the new session is established on that connection and then the     function will access a memory buffer that might be freed. When using that memory, libcurl might even call     a function pointer in the object, making it possible for a remote code execution if the server could     somehow manage to get crafted memory content into the correct place in memory. (CVE-2021-22901)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11268 advisory.

  - An Unchecked Error Condition vulnerability in the subscriber management daemon (smgd) of Juniper Networks     Junos OS allows an unauthenticated adjacent attacker to cause a crash of and thereby a Denial of Service     (DoS). In a subscriber management / broadband edge environment if a single session group configuration     contains dual-stack and a pp0 interface, smgd will crash and restart every time a PPPoE client sends a     specific message. This issue affects Juniper Networks Junos OS on MX Series: 16.1 version 16.1R1 and later     versions prior to 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to     19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S5; 20.1 versions     prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions     prior to 20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect     Juniper Networks Junos OS versions prior to 16.1R1. (CVE-2022-22160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11286 advisory.

  - An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6     packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service     (DoS). Over time, exploitation of this vulnerability may cause traffic to stop being forwarded, or a crash     of the fxpc process. An indication of the issue occurring may be observed through the following log     messages: Sep 13 17:14:59 hostname : %PFE-3: fpc0 (buf alloc) failed allocating packet buffer Sep 13     17:14:59 hostname : %PFE-7: fpc0 brcm_pkt_buf_alloc:393 (buf alloc) failed allocating packet buffer When     Packet DMA heap utilization reaches 99%, the system will become unstable. Packet DMA heap utilization can     be monitored using the command: user@junos# request pfe execute target fpc0 timeout 30 command show heap     ID Base Total(b) Free(b) Used(b) % Name -- ---------- ----------- ----------- ----------- --- -----------     0 213301a8 536870488 387228840 149641648 27 Kernel 1 91800000 8388608 3735120 4653488 55 DMA 2 92000000     75497472 74452192 1045280 1 PKT DMA DESC 3 d330000 335544320 257091400 78452920 23 Bcm_sdk 4 96800000     184549376 2408 184546968 99 Packet DMA <<<< 5 903fffe0 20971504 20971504 0 0 Blob This issue affects:
    Juniper Networks Junos OS 18.4 versions prior to 18.4R2-S10, 18.4R3-S10 on EX2300 Series, EX2300-MP     Series, EX3400 Series; 19.1 versions prior to 19.1R3-S7 on EX2300 Series, EX2300-MP Series, EX3400 Series;
    19.2 versions prior to 19.2R1-S8, 19.2R3-S4 on EX2300 Series, EX2300-MP Series, EX3400 Series; 19.3     versions prior to 19.3R3-S5 on EX2300 Series, EX2300-MP Series, EX3400 Series; 19.4 versions prior to     19.4R3-S7 on EX2300 Series, EX2300-MP Series, EX3400 Series; 20.1 versions prior to 20.1R3-S3 on EX2300     Series, EX2300-MP Series, EX3400 Series; 20.2 versions prior to 20.2R3-S3 on EX2300 Series, EX2300-MP     Series, EX3400 Series; 20.3 versions prior to 20.3R3-S2 on EX2300 Series, EX2300-MP Series, EX3400 Series;
    20.4 versions prior to 20.4R3-S1 on EX2300 Series, EX2300-MP Series, EX3400 Series; 21.1 versions prior to     21.1R2-S2, 21.1R3 on EX2300 Series, EX2300-MP Series, EX3400 Series; 21.2 versions prior to 21.2R1-S2,     21.2R2 on EX2300 Series, EX2300-MP Series, EX3400 Series; 21.3 versions prior to 21.3R1-S1, 21.3R2 on     EX2300 Series, EX2300-MP Series, EX3400 Series. (CVE-2022-22180)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11278 advisory.

  - A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon     (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to     cause a memory leak. Continued exploitation can lead to memory exhaustion and thereby a Denial of Service     (DoS). This issue occurs when specific LLDP packets are received. The impact of the l2cpd cores is that if     any of the stp protocols (rstp, mstp or vstp) is used then stp re-converges and traffic loss will occur     during that time. Also if any services depend on LLDP state (like PoE or VoIP device recognition) then     these will also be affected. The memory utilization of the L2CPd process can be monitored with the     following command: user@host> show system processes extensive | match l2cpd 1234 root 52 0 521M 43412K RUN     1 4:02 34.47% l2cpd This issue affects: Juniper Networks Junos OS 18.4 version 18.4R2-S4 and later     versions prior to 18.4R2-S10. 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to     19.3R3-S5; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to     20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to     21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R2; Juniper Networks Junos OS Evolved All versions prior to     20.4R3-S2-EVO; 21.1 version 21.1R1-EVO and later versions; 21.2 versions prior to 21.2R2-EVO. This issue     does not affect: Juniper Networks Junos OS 19.1 version 19.1R1 and later versions. (CVE-2022-22172)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11275 advisory.

  - An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS     allows an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective     Lifetime vulnerability. Continued exploitation of this vulnerability will eventually lead to an FPC reboot     and thereby a Denial of Service (DoS). This issue affects: Juniper Networks Junos OS on vMX and MX150: All     versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S5; 19.4 versions prior to     19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions     prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions     prior to 21.2R1-S1, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. (CVE-2022-22168)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11272 advisory.

  - An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation     for disabling the telnet service to not take effect as expected, resulting in the telnet service staying     enabled. When it is not intended to be operating on the device, an administrator can issue the following     command to verify whether telnet is operating in the background: user@device > show system connections |     grep :23 tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 20879/xinetd This issue affects: Juniper Networks Junos OS     Evolved All versions prior to 20.4R2-S2-EVO; 21.1 version 21.1R1-EVO and later versions; 21.2 versions     prior to 21.2R2-EVO. (CVE-2022-22164)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11262 advisory.

  - In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite     Device (SD) control state machine of Juniper Networks Junos OS allows an attacker who is able to make     physical changes to the cabling of the device to cause a denial of service (DoS). An SD can get rebooted     and subsequently controlled by an Aggregation Device (AD) which does not belong to the original Fusion     setup and is just connected to an extended port of the SD. To carry out this attack the attacker needs to     have physical access to the cabling between the SD and the original AD. This issue affects: Juniper     Networks Junos OS 16.1R1 and later versions prior to 18.4R3-S10; 19.1 versions prior to 19.1R3-S7; 19.2     versions prior to 19.2R3-S4. This issue does not affect Juniper Networks Junos OS versions prior to     16.1R1. (CVE-2022-22154)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11282 advisory.

  - An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon (jdhcpd)     of Juniper Networks Junos OS allows an adjacent unauthenticated attacker sending a malformed DHCP packet     to cause a crash of jdhcpd and thereby a Denial of Service (DoS). If option-82 is configured in a DHCP     snooping / -security scenario, jdhcpd crashes if a specific malformed DHCP request packet is received. The     DHCP functionality is impacted while jdhcpd restarts, and continued exploitation of the vulnerability will     lead to the unavailability of the DHCP service and thereby a sustained DoS. This issue affects Juniper     Networks Junos OS 13.2 version 13.2R1 and later versions prior to 15.1R7-S11; 18.3 versions prior to     18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2     versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions prior     to 19.4R3-S6; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to     20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to     21.2R1-S1, 21.2R2. This issue does not affect Juniper Networks Junos OS version 12.3R12 and prior     versions. (CVE-2022-22176)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11196 advisory.

  - A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function     is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if storm-     control enhanced is configured, can lead to the enhanced storm control filter group not be installed. It     will cause storm control not to work hence allowing an attacker to cause high CPU usage or packet loss     issues by sending a large amount of broadcast or unknown unicast packets arriving the device. This issue     affects Juniper Networks QFX5100, QFX5110, QFX5120, QFX5200, QFX5210, EX4600, and EX4650, and QFX5100 with     QFX 5e Series image installed. QFX5130 and QFX5220 are not affected from this issue. This issue affects     Juniper Networks Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series. No other product or platform is     affected by this vulnerability. (CVE-2021-0294)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11223 advisory.

  - An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of     Exceptional Conditions in Juniper Networks Junos OS on QFX Series and PTX Series allows an unauthenticated     network based attacker to cause increased FPC CPU utilization by sending specific IP packets which are     being VXLAN encapsulated leading to a partial Denial of Service (DoS). Continued receipted of these     specific traffic will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper     Networks Junos OS on QFX Series: All versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13,     17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions     prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to     19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to     19.3R3-S1; 19.4 versions prior to 19.4R2-S3, 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2     versions prior to 20.2R2, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2. Juniper Networks Junos OS on     PTX Series: All versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to     19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R1-S4,     19.4R3-S5; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior     to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2.
    (CVE-2021-31361)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11222 advisory.

  - A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a     local, low-privileged user to cause the Juniper DHCP daemon (jdhcpd) process to crash, resulting in a     Denial of Service (DoS), or execute arbitrary commands as root. Continued processing of malicious input     will repeatedly crash the system and sustain the Denial of Service (DoS) condition. This issue affects:
    Juniper Networks Junos OS: All versions, including the following supported releases: 15.1 versions prior     to 15.1R7-S10; 17.4 versions prior to 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to     18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions     prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R2-S2,     20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to     20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2. Juniper Networks Junos OS Evolved: All     versions prior to 20.4R2-S3-EVO; All versions of 21.1-EVO. (CVE-2021-31359)

  - An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved     command-line interpreter (CLI) allows a low-privileged user to overwrite local files as root, possibly     leading to a system integrity issue or Denial of Service (DoS). Depending on the files overwritten,     exploitation of this vulnerability could lead to a sustained Denial of Service (DoS) condition, requiring     manual user intervention to recover. This issue affects: Juniper Networks Junos OS: All versions,     including the following supported releases: 15.1 versions prior to 15.1R7-S10; 17.4 versions prior to     17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to     19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3; 19.4     versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R2-S2, 20.1R3-S1; 20.2 versions prior to     20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to     21.1R1-S1, 21.1R2. Juniper Networks Junos OS Evolved: All versions prior to 20.4R2-S3-EVO; All versions of     21.1-EVO. (CVE-2021-31360)

Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11232 advisory.

  - An Incomplete List of Disallowed Inputs vulnerability in Packet Forwarding Engine (PFE) of Juniper     Networks Junos OS on QFX5000 Series and EX4600 Series allows an adjacent unauthenticated attacker which     sends a high rate of specific multicast traffic to cause control traffic received from the network to be     dropped. This will impact control protocols (including but not limited to routing-protocols) and lead to a     Denial of Service (DoS). Continued receipt of this specific multicast traffic will create a sustained     Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on QFX5000 and EX4600     Series: All versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R3-S5; 18.3 versions prior to     18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to     19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R1-S4,     19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions     prior to 20.3R3; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2.
    (CVE-2021-31370)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11242 advisory.

  - An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem     of Junos OS allows a local authenticated attacker to cause routing process daemon (RPD) to crash and     restart, causing a Denial of Service (DoS). Repeated actions by the attacker will create a sustained     Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 15.1 versions prior to     15.1R7-S9; 17.3 versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R2-S13, 17.4R3-S5; 18.1 versions     prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions     prior to 18.4R2-S8, 18.4R3-S7; 19.1 versions prior to 19.1R2-S3, 19.1R3-S5; 19.2 versions prior to     19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4,     19.4R3-S2; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R2-S3, 20.2R3; 20.3     versions prior to 20.3R3; 20.4 versions prior to 20.4R1-S1, 20.4R2. (CVE-2021-31377)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11226 advisory.

  - A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to     send specific sequences of packets to the device thereby causing a Denial of Service (DoS). By repeatedly     sending these sequences of packets to the device, an attacker can sustain the Denial of Service (DoS)     condition. The device will abnormally shut down as a result of these sent packets. A potential indicator     of compromise will be the following message in the log files: eventd[13955]: SYSTEM_ABNORMAL_SHUTDOWN:
    System abnormally shut down These issue are only triggered by traffic destined to the device. Transit     traffic will not trigger these issues. This issue affects: Juniper Networks Junos OS 12.3 versions prior     to 12.3R12-S19; 15.1 versions prior to 15.1R7-S10; 16.1 version 16.1R1 and later versions; 16.2 version     16.2R1 and later versions; 17.1 version 17.1R1 and later versions; 17.2 version 17.2R1 and later versions;
    17.3 versions prior to 17.3R3-S12; 17.4 version 17.4R1 and later versions; 18.1 versions prior to     18.1R3-S13; 18.2 version 18.2R1 and later versions; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior     to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R3-S3; 19.3 versions prior to     19.3R3-S3; 19.4 versions prior to 19.4R1-S4, 19.4R3-S5; 20.1 versions prior to 20.1R2-S2, 20.1R3-S1; 20.2     versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1     versions prior to 21.1R1-S1, 21.1R2; 21.2 versions prior to 21.2R2. (CVE-2021-0283)

  - An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in     the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000     Series with SPC2 allows an unauthenticated network based attacker sending specific traffic to cause a     crash of the flowd/srxpfe process, responsible for traffic forwarding in SRX, which will cause a Denial of     Service (DoS). Continued receipt and processing of this specific traffic will create a sustained Denial of     Service (DoS) condition. This issue can only occur when specific packets are trying to create the same     session and logging for session-close is configured as a policy action. Affected platforms are: SRX300     Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2. Not affected platforms are: SRX4000 Series,     SRX5000 Series with SPC3, and vSRX Series. This issue affects Juniper Networks Junos OS SRX300 Series,     SRX500 Series, SRX1500, and SRX5000 Series with SPC2: All versions prior to 17.4R3-S5; 18.3 versions prior     to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to     19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4,     19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to     20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2. (CVE-2021-31364)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11228 advisory.

  - An Unchecked Return Value vulnerability in the authd (authentication daemon) of Juniper Networks Junos OS     on MX Series configured for subscriber management / BBE allows an adjacent attacker to cause a crash by     sending a specific username. This impacts authentication, authorization, and accounting (AAA) services on     the MX devices and leads to a Denial of Service (DoS) condition. Continued receipted of these PPP login     request will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks     Junos OS 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S12; 17.4 versions prior to     17.4R3-S5; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to     18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to     19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R3-S3; 20.1     versions prior to 20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior to 20.3R3; 20.4 versions     prior to 20.4R3; 21.1 versions prior to 21.1R2. (CVE-2021-31366)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11230 advisory.

  - An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an     unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by     sending a flood of traffic to the out-of-band management ethernet port. Continued receipted of a flood     will create a sustained Denial of Service (DoS) condition. Once the flood subsides the system will recover     by itself. An indication that the system is affected by this issue would be that kernel and netisr process     are shown to be using a lot of CPU cycles like in the following example output: user@host> show system     processes extensive ... PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 16 root -72 - 0K 304K     WAIT 1 839:40 88.96% intr{swi1: netisr 0} 0 root 97 - 0K 160K RUN 1 732:43 87.99% kernel{bcm560xgmac0 que}     This issue affects Juniper Networks JUNOS OS on EX2300 Series, EX3400 Series, and ACX710: All versions     prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions     prior to 18.4R2-S8, 18.4R3-S9; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R1-S7,     19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R3-S3; 20.1     versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1,     20.3R3; 20.4 versions prior to 20.4R2. (CVE-2021-31368)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11236 advisory.

  - Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs.
    It was discovered that packets utilizing these IP addresses may egress an QFX5110 switch, leaking     configuration information such as heartbeats, kernel versions, etc. out to the Internet, leading to an     information exposure vulnerability. This issue affects: Juniper Networks Junos OS on QFX5110 Series: All     versions prior to 17.3R3-S12; 18.1 versions prior to 18.1R3-S13; 18.3 versions prior to 18.3R3-S5; 19.1     versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to     19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R1-S4, 19.4R3-S5; 20.1 versions prior to 20.1R2-S2,     20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to     20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2; (CVE-2021-31371)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11220 advisory.

  - A persistent cross-site scripting (XSS) vulnerability in the captive portal graphical user interface of     Juniper Networks Junos OS may allow a remote authenticated user to inject web script or HTML and steal     sensitive data and credentials from a web administration session, possibly tricking a follow-on     administrative user to perform administrative actions on the device. This issue affects Juniper Networks     Junos OS: All versions, including the following supported releases: 12.3X48 versions prior to     12.3X48-D105; 15.1X49 versions prior to 15.1X49-D220; 18.3 versions prior to 18.3R3-S5; 18.4 versions     prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R3-S3; 19.3 versions     prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3; 20.2 versions prior     to 20.2R1-S1, 20.2R2; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2; 21.1 versions prior to     21.1R2. (CVE-2021-31355)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
161299	Juniper Junos OS Evolved DoS (JSA69516)	high
161287	Juniper Junos OS Heap-based Buffer Overflow (JSA69497)	high
161264	Juniper Junos OS Kernel Crash DoS (JSA11213)	high
161261	Juniper Junos OS FPC Crash (JSA11229)	medium
161217	Juniper Junos OS Vulnerability (JSA69494)	medium
160200	Juniper Junos OS DoS (JSA11212)	medium
160183	Juniper Junos OS Vulnerability (JSA69503)	medium
160125	Juniper Junos OS Evolved DoS (JSA69505)	high
160087	Juniper Junos OS Vulnerability (JSA69519)	medium
160076	Juniper Junos OS DoS (JSA69493)	high
159280	Juniper Junos OS DoS (JSA11239)	high
159271	Juniper Junos OS Privilege Escalation (JSA11237)	high
159234	Juniper Junos OS Spoofing (JSA11240)	medium
159063	Juniper Junos OS Improper Certificate Validation (JSA11264)	high
158934	Juniper Junos OS Vulnerability (JSA11189)	medium
158896	Juniper Junos OS Vulnerability (JSA11246)	high
158041	Juniper Junos OS DoS (JSA11274)	medium
156782	Juniper Junos OS DoS (JSA11285)	medium
156694	Juniper Junos OS Vulnerability (JSA11284)	high
156693	Juniper Junos OS Vulnerability (JSA11281)	high
156692	Juniper Junos OS Vulnerability (JSA11293)	high
156689	Juniper Junos OS Vulnerability (JSA11261)	high
156687	Juniper Junos OS Vulnerability (JSA11280)	high
156686	Juniper Junos OS Vulnerability (JSA11270)	high
156685	Juniper Junos OS Vulnerability (JSA11269)	high
156684	Juniper Junos OS Multiple Vulnerabilities (JSA11277)	high
156683	Juniper Junos OS Vulnerability (JSA11263)	medium
156682	Juniper Junos OS Vulnerability (JSA11279)	high
156681	Juniper Junos OS Vulnerability (JSA11267)	high
156680	Juniper Junos OS Multiple Vulnerabilities (JSA11265)	critical
156679	Juniper Junos OS Vulnerability (JSA11271)	medium
156678	Juniper Junos OS Vulnerability (JSA11283)	high
156677	Juniper Junos OS Multiple Vulnerabilities (JSA11289)	high
156676	Juniper Junos OS Vulnerability (JSA11268)	medium
156675	Juniper Junos OS Vulnerability (JSA11286)	high
156674	Juniper Junos OS Vulnerability (JSA11278)	medium
156673	Juniper Junos OS Vulnerability (JSA11275)	medium
156672	Juniper Junos OS Vulnerability (JSA11272)	medium
156671	Juniper Junos OS Vulnerability (JSA11262)	medium
156670	Juniper Junos OS Vulnerability (JSA11282)	medium
155626	Juniper Junos OS Vulnerability (JSA11196)	medium
154127	Juniper Junos OS Vulnerability (JSA11223)	medium
154126	Juniper Junos OS Multiple Vulnerabilities (JSA11222)	high
154125	Juniper Junos OS Vulnerability (JSA11232)	medium
154124	Juniper Junos OS Vulnerability (JSA11242)	medium
154123	Juniper Junos OS Vulnerability (JSA11226)	high
154122	Juniper Junos OS Vulnerability (JSA11228)	medium
154121	Juniper Junos OS Vulnerability (JSA11230)	high
154120	Juniper Junos OS Vulnerability (JSA11236)	medium
154119	Juniper Junos OS Vulnerability (JSA11220)	medium

Junos Local Security Checks Family for Nessus

high

high

high

medium

medium

medium

medium

high

medium

high

high

high

medium

high

medium

high

medium

medium

high

high

high

high

high

high

high

high

medium

high

high

critical

medium

high

high

medium

high

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

high

medium

high

medium

medium