The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11094 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11100 advisory: an information exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 14.1X53-D53, 15.1R7-S4, 15.1X53-D593, 16.1R7-S4, 17.1R2-S11, 17.2R3-S3, 17.3R2-S5, 17.4R2-S9, 18.1R3-S8, 18.2R2, or 18.3R1-S7. It is, therefore, affected by an authentication bypass vulnerability as referenced in the JSA11001 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability. An unauthenticated remote attacker can send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain leading to disruptions in network traffic causing a Denial of Service (DoS) condition as referenced in the JSA11101 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being redirected to an egress interface on a different VLAN. This causes a Denial of Service (DoS) to those clients sending these particular types of traffic. Such traffic being sent by a client may appear genuine, but is non-standard in nature and should be considered as potentially malicious, and can be targeted to the device, or destined through it for the issue to occur.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11098 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple local privilege escalation vulnerabilities as referenced in the JSA11114 advisory. Specifically:

  - A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper     Networks Junos OS may allow a locally authenticated shell user the ability to create and read database     files generated by the dexp utility, including password hashes of local users. Since dexp is shipped with     setuid permissions enabled and is owned by the root user, this vulnerability may allow a local privileged     user the ability to run dexp with root privileges and access sensitive information in the dexp database.
    (CVE-2021-0204)     
  - A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally     authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is     shipped with setuid permissions enabled and is owned by the root user, allowing local users to run telnetd.real     with root privileges. (CVE-2021-0223)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11096 advisory. A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker can repeatedly disable the PFE causing a sustained Denial of Service (DoS). This issue only affects Juniper Networks NFX Series, SRX Series platforms when SSL Proxy is configured.
This issue affects Juniper Networks Junos OS on NFX Series and SRX Series: 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S1; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS versions on NFX Series and SRX Series prior to 18.3R1.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11092 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11108 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11109 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11111 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11091 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11105 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11107 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11083 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11086 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote  host is affected by a vulnerability as referenced in the JSA11067 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11084 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the self reported version of Junos OS on the remote device it is affected by a denial of service (DoS) vulnerability. An unauthenticated attacker can continuously send crafted IPv6 packets through the device causing repetitive MS-PIC process crashes, resulting in an extended Denial of Service condition.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the remote Juniper Junos device is affected by a memory leak within the EVPN protocol. It, Therefore, could allow for a adjacent unauthenticated attacker to crash the EVPN protocol with specifically crafted BGP packets.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the self reported version of Junos OS on the remote device, the device is vulnerable to a denial of service vulnerability due to a memory leak. An unauthenticated, remote attacker can exploit this, by sending multiple of a specific SNMP OID poll, to consume increasing amounts of memory, which will eventually lead to a kernel crash (vmcore). Prior to the crash, other processes might be impacted, such as failure to establish SSH connection to the device.

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is SRX Series prior to 12.3X48-D105, 15.1X49-D221, 17.4R3-S3, 18.1R3-S11, 18.2R3-S3, 18.3R2-S4, 18.4R2-S5, 19.1R2-S2, 19.2R1-S5, 19.3R3, or 19.4R2. It is, therefore, affected by a vulnerability as referenced in the JSA11081 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is PTX or QFX Series prior to 17.2X75-D105, 18.1R3-S11, 18.2R3-S5, 18.2X75-D420, 18.3R2-S4, 18.4R1-S7, 19.1R2-S2, 19.2R1-S5, 19.3R2-S3, 19.4R1-S2, or 20.1R1-S2. It is, therefore, affected by a vulnerability as referenced in the JSA11076 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is MX series or EX9200 series prior to 17.2R3-S4, 17.2X75-D102, 17.3R3-S8, 17.4R2-S11,18.2R2-S7, 18.2X75-D30, or 18.3R2-S4. It is, therefore, affected by a vulnerability as referenced in the JSA11062 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 17.4R2-S12, 18.1R3-S11, 18.2R3-S6, 18.2X75-D65, 18.3R2-S4, 18.4R2-S5, 19.1R3-S2, 19.2R1-S5, 19.3R2-S4, 19.4R1-S3, or 20.1R1-S3. It is, therefore, affected by a vulnerability as referenced in the JSA11068 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is NFX350 Series prior to 19.4R3 or 20.1R1-S4. It is, therefore, affected by a vulnerability. This vulnerability allows a local attacker with access to brute-force decrypt password hashes stored on the system as referenced in the JSA11066 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is EX2300, EX2300-C or EX3400 version 18.1R3-S4 or 18.3R1-S3. It is, therefore, affected by a privilege escalation vulnerability as referenced in the JSA10978 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the self reported version of Junos OS on the remote device is vulnerable to improper input validation.
When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon (mspmand) process, responsible for managing 'URL Filtering service', may crash, causing the Services PIC to restart. While the Services PIC is restarting, all PIC services including DNS filtering service (DNS sink holing) will be bypassed until the Services PIC completes its boot process.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the self reported version of Junos OS on the remote device it is affected by a denial of service vulnerability as referenced in the JSA11024 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is NFX prior to 18.2R1. It is, therefore, affected by a privilege escalation vulnerability as referenced in the JSA10977 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 12.3X48-D100, 15.1X49-D210, 17.3R2-S5, 17.4R2-S9, 18.1R3-S10, 18.2R2-S7, 18.3R1-S7, 18.4R1-S6, 19.1R1-S4, 19.2R1-S3, 19.3R2-S1, or 19.4R1-S1. It is, therefore, affected by a unified access control (UAC) bypass vulnerability as referenced in the JSA11018 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 12.3R12-S15, 12.3X48-D95, 14.1X50-D145, 14.1X53-D47, 15.1R2, 15.1X49-D170, or 15.1X53-D67. It is, therefore, affected by a vulnerability as referenced in the JSA11020 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is vMX and MX150 prior to 18.1R3, 18.2R3, 18.2X75-D60, 18.3R3, 18.4R2, or 19.1R2. It is, therefore, affected by a denial of service vulnerability (DoS) as referenced in the JSA11006 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the remote Junos OS device is affected by multiple vulnerabilities in the BIOS firmware, including the following:

  - Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow     an unauthenticated user to potentially enable escalation of privilege via network access. (CVE-2019-11131)

  - Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R)     TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation     of privileges, information disclosure or denial of service via adjacent access. (CVE-2019-0169)

  - Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an     unauthenticated user to potentially enable escalation of privilege via network access. (CVE-2019-11107)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service (DoS) vulnerability. Processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an extended DoS condition.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the remote Juniper Junos device is affected by a vulnerability in the OpenSSL library. There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the remote Juniper Junos OS device is affected by a denial of service (DoS) vulnerability. When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine (PFE) will become disabled upon receipt of small fragments requiring reassembly. By continuously sending fragmented packets that cannot be reassembled, an attacker can repeatedly disable the PFE causing a sustained DoS.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the remote Juniper Junos OS device is affected by a denial of service (DoS) vulnerability. When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine (PFE) will become disabled upon receipt of large packets requiring fragmentation. By continuously sending fragmented packets that cannot be reassembled, an unauthenticated, remote attacker can repeatedly disable the PFE causing a DoS.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the remote Juniper Junos device is affected by a denial of service (DoS) vulnerability where receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker connected to the same broadcast domain can repeatedly crash the PFE, causing a prolonged Denial of Service (DoS). 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Junos OS installed on the remote host is affected by a denial of service (DoS) vulnerability. On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which can lead to Flexible PIC Concentrator (FPC) crash or the system to crash and restart (vmcore).
This issue can be trigged by IPv4 or IPv6 and it is caused only by TCP packets. This issue is not related to any specific configuration and it affects Junos OS releases starting from 17.4R1. However, this issue does not affect Junos OS releases prior to 18.2R1 when Nonstop active routing (NSR) is configured [edit routing-options nonstop-routing].
The number of mbufs is platform dependent. Once the device runs out of mbufs, the FPC crashes or the vmcore occurs and the device might become inaccessible requiring a manual restart. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versio number.

The version of Junos OS installed on the remote host is prior to 17.2X75-D105.19, 17.3R3-S8, 17.4R2-S10, 18.1R3-S10, 18.2R2-S7, 18.2X75-D13, 18.3R2-S4, 18.4R1-S7, 19.1R1-S5, 19.2R1-S5, 19.3R2-S2, or 19.4R1-S2. It is, therefore, affected by a denial of service vulnerability (DoS) as referenced in the JSA11032 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Junos OS on the remote device is affected by a double free vulnerability.
On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, this double free vulnerability can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) due to processing of a specific HTTP message. Continued processing of this specific HTTP message may result in an extended Denial of Service (DoS). The offending HTTP message that causes this issue may originate both from the HTTP server or the client.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 18.1R3-S9, 18.2R2-S7, 18.3R1-S7, 18.4R1-S7, 19.1R1-S5, 19.2R1-S2, or 19.3R2. It is, therefore, affected by a vulnerability as referenced in the JSA11031 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the self reported version of Junos OS on the remote device it is affected by a Denial of Service (DoS) vulnerability. By continuously executing the same CLI commands 'show ospf interface extensive' or 'show ospf interface detail' CLI commands, a local attacker can repeatedly crash the RPD process causing a sustained Denial of Service.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the self-reported version of Junos OS on the remote device, it is affected by a denial of service (DoS) vulnerability due to how it processes a specific UPDATE for an EBGP peer. An unauthenticated, remote attacker can exploit this, by sending a crafted UPDATE, in order to crash the routing process daemon (RPD) and cause a restart.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 14.1X53-D53, 15.1R7-S6, 15.1X49-D200, 16.1R7-S7, 17.1R2-S11, 17.2R3-S3, 17.3R2-S5, 17.4R2-S9, 18.1R3-S8, 18.2R3-S2, 18.3R2-S3, 18.4R1-S5, 19.1R1-S4, 19.2R1-S4, or 19.3R1-S1. It is, therefore, affected by an information exposure vulnerability as referenced in the JSA11008 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 16.1R7-S6, 16.2R2-S11, 17.1R2-S11, 17.2R1-S9, 17.3R2-S5, 17.4R2-S7, 18.1R3-S4, 18.2R3, 18.2X75-D50, 18.3R2, or 18.4R2. It is, therefore, affected by a vulnerability as referenced in the JSA11002 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the self reported version of Junos OS on the remote device it is affected by a remote code execution vulnerability in the routing protocol daemon (RPD). An unauthenticated, remote attacker can exploit this, via crafted BGP NOTIFICATION messages, to crash the RPD process and potentially allow the execution of arbitrary commands.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 16.1R7-S6, 16.2R2-S11, 17.1R2-S11, 17.2R1-S9, 17.2X75-D105, 17.3R2-S5, 17.4R2-S8, 18.1R3-S8, 18.2R2-S6, 18.2X75-D12, 18.3R1-S6, 18.4R1-S5, 19.1R1-S3, or 19.2R1-S2.
It is, therefore, affected by a denial of service (DoS) vulnerability. An unauthenticated, remote attacker can exploit this, by sending a specific BGP UPDATE message, in order to cause other peers to terminate the established BGP session as referenced in the JSA11013 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
146194	Juniper Junos OS DoS (JSA11094)	medium
146106	Juniper Junos OS Privilege Escalation in J-Web (JSA11100)	medium
146092	Juniper Junos Authentication Bypass (JSA11001)	medium
146090	Juniper Junos OS DoS (JSA11101)	medium
145691	Juniper Junos OS DoS (JSA11097)	medium
145571	Juniper Junos OS Denial of Service (JSA11098)	low
145502	Juniper Junos OS Multiple Local Privilege Escalation Vulnerabilities (JSA11114)	high
145261	Juniper Junos DoS (JSA11096)	medium
144986	Juniper JSA11092	medium
144985	Juniper JSA11108	high
144984	Juniper JSA11109	high
144983	Juniper JSA11111	low
144982	Juniper JSA11091	medium
144978	Juniper Junos OS Denial of Service (JSA11105)	low
144933	Juniper JSA11107	low
143383	Junos OS malformed IPv6 packet DoS (JSA11083)	high
143382	Juniper Junos OS EX4300-MP/EX4600/QFX5K Series DoS (JSA11086)	low
143381	Juniper Junos EX4300 Series DoS (JSA11067)	low
143263	Juniper Junos OS EX4300 / EX4600 / QFX5 Series DoS (JSA11084)	low
142145	Juniper Junos OS MX Series DoS (JSA11077)	medium
141868	Junos OS Multiple vulnerabilities (JSA11075)	low
141849	Juniper Junos SNMP DoS (JSA11080)	high
141846	Juniper Junos OS SRX Series: High CPU Load Utilization Vulnerability (JSA11081)	medium
141845	Juniper Junos OS PTX/QFX Series: Unexpected Packet Forwarding Vulnerability (JSA11076)	medium
141827	Juniper Junos MX/EX9200 Series: DDoS Vulnerability (JSA11062)	medium
141806	Juniper Junos OS: DoS Vulnerability (JSA11068)	medium
141802	Juniper Junos NFX350 Series Readable Password Hashes Vulnerability (JSA11066)	low
140737	Juniper Junos Privilege Escalation (JSA10978)	high
140586	Juniper Junos DNS filtering JSA11028	medium
140467	Juniper Junos BGP DoS (JSA11024)	medium
140454	Juniper Junos Privilege Escalation Vulnerability (JSA10977)	high
139071	Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability (JSA11018)	medium
139070	Juniper Junos DoS (JSA11020)	medium
139069	Juniper Junos DoS (JSA11006)	medium
139033	Juniper Junos NFX150 Multiple Vulnerabilities (JSA11026)	high
139032	Junos OS: RPD crash when processing a specific BGP packet (JSA11035)	medium
138909	Juniper Junos OpenSSL Security Advisory (JSA11025)	medium
138908	Juniper Junos MX Series PFE Small Packet DoS (JSA11036)	medium
138907	Juniper Junos MX Series PFE Large Packet DoS (JSA11041)	medium
138906	Juniper Junos MX Series PFE DoS (JSA11038)	low
138905	Juniper Junos Kernel Crash (vmcore) or FPC Crash (JSA11040)	medium
138889	Juniper Junos RPD Crash DoS (JSA11032)	medium
138839	Juniper Junos SRX Double Free ICAP Redirect DoS RCE (JSA11034)	medium
138608	Juniper JSA11031	high
138605	Juniper Junos Denial of Service (DoS) JSA11030	low
138604	Juniper Junos BGP Update DoS (JSA11033)	medium
138210	Juniper Junos Information Exposure Vulnerability (JSA11008)	medium
137056	Juniper JSA11002	medium
137004	Juniper Junos RCE (JSA10871)	high
136828	Junos OS Invalid BGP Update Termination Denial Of Service Vulnerability (JSA11013)	high

Junos Local Security Checks Family for Nessus

medium

medium

medium

medium

medium

low

high

medium

medium

high

high

low

medium

low

low

high

low

low

low

medium

low

high

medium

medium

medium

medium

low

high

medium

medium

high

medium

medium

medium

high

medium

medium

medium

medium

low

medium

medium

medium

high

low

medium

medium

medium

high

high