[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6Uvskzj7LySAsypfmrRpbxMexayewTCQhQOS7FjyPgw":3,"g5a-ex:juniper\u002Fjunos_os_evolved@*":189,"g5a-family:juniper\u002Fjunos_os_evolved":191},{"success":4,"data":5},true,{"product":6,"versions":85,"topVulnerabilitiesByEpss":111,"kevVulnerabilities":166,"seoMetadata":167,"meta":186},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":84},"juniper","junos_os_evolved",25,157,0,"2024-07-11",[14,18,21,24,27,29,32,34,37,40,43,46,49,52,55,58,61,64,67,70,73,75,78,80,82],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"18.3",8,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"19.1",9,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"19.2",19,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"19.3",17,{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},"19.4",{"version":30,"cve_count":31,"kev_count":11,"has_kev":17},"20.1",26,{"version":33,"cve_count":23,"kev_count":11,"has_kev":17},"20.2",{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},"20.3",21,{"version":38,"cve_count":39,"kev_count":11,"has_kev":17},"20.4",68,{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},"21.1",46,{"version":44,"cve_count":45,"kev_count":11,"has_kev":17},"21.2",69,{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},"21.3",57,{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},"21.4",81,{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},"22.1",60,{"version":56,"cve_count":57,"kev_count":11,"has_kev":17},"22.2",62,{"version":59,"cve_count":60,"kev_count":11,"has_kev":17},"22.3",53,{"version":62,"cve_count":63,"kev_count":11,"has_kev":17},"22.4",45,{"version":65,"cve_count":66,"kev_count":11,"has_kev":17},"23.1",3,{"version":68,"cve_count":69,"kev_count":11,"has_kev":17},"23.2",30,{"version":71,"cve_count":72,"kev_count":11,"has_kev":17},"23.4",6,{"version":74,"cve_count":11,"kev_count":11,"has_kev":17},"24.1",{"version":76,"cve_count":77,"kev_count":11,"has_kev":17},"24.2",1,{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},"24.4",{"version":81,"cve_count":11,"kev_count":11,"has_kev":17},"25.2",{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},"25.4","Junos Os Evolved by Juniper is a technology product with 25 tracked versions and 157 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},{"version":30,"cve_count":31,"kev_count":11,"has_kev":17},{"version":33,"cve_count":23,"kev_count":11,"has_kev":17},{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},{"version":38,"cve_count":39,"kev_count":11,"has_kev":17},{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},{"version":44,"cve_count":45,"kev_count":11,"has_kev":17},{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},{"version":56,"cve_count":57,"kev_count":11,"has_kev":17},{"version":59,"cve_count":60,"kev_count":11,"has_kev":17},{"version":62,"cve_count":63,"kev_count":11,"has_kev":17},{"version":65,"cve_count":66,"kev_count":11,"has_kev":17},{"version":68,"cve_count":69,"kev_count":11,"has_kev":17},{"version":71,"cve_count":72,"kev_count":11,"has_kev":17},{"version":74,"cve_count":11,"kev_count":11,"has_kev":17},{"version":76,"cve_count":77,"kev_count":11,"has_kev":17},{"version":79,"cve_count":11,"kev_count":11,"has_kev":17},{"version":81,"cve_count":11,"kev_count":11,"has_kev":17},{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},[112,120,126,131,138,142,147,150,155,160],{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":119},"CVE-2023-4481","An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).\n\nWhen certain specific crafted BGP UPDATE messages are received over an established BGP session, one BGP session may be torn down with an UPDATE message error, or the issue may propagate beyond the local system which will remain non-impacted, but may affect one or more remote systems. This issue is exploitable remotely as the crafted UPDATE message can propagate through unaffected systems and intermediate BGP speakers.\nContinuous receipt of the crafted BGP UPDATE messages will create a sustained Denial of Service (DoS) condition for impacted devices.\n\nThis issue affects eBGP and iBGP, in both IPv4 and IPv6 implementations.  This issue requires a remote attacker to have at least one established BGP session.\n Improper Input Validation, Denial of Service vulnerability in Juniper Networks, Inc. Junos OS (BGP, rpd modules), Juniper Networks, Inc. Junos OS Evolved (BGP, rpd modules) allows Fuzzing.This issue affects \n\nJunos OS: \n\n\n\n  *  All versions before 20.4R3-S10,\n  *  from 21.1R1 through 21.*,\n  *  from 21.2 before 21.2R3-S5,\n  *  from 21.3 before 21.3R3-S5,\n  *  from 21.4 before 21.4R3-S7 (unaffected from 21.4R3-S5, affected from 21.4R3-S6)\n  *  from 22.1 before 22.1R3-S4,\n  *  from 22.2 before 22.2R3-S3,\n  *  from 22.3 before 22.3R3-S1,\n  *  from 22.4 before 22.4R3,\n  *  from 23.2 before 23.2R2.\n\n\nJunos OS Evolved:\n\n\n\n  *  All versions before 20.4R3-S10-EVO,\n  *  from 21.2-EVO before 21.2R3-S7-EVO,\n  *  from 21.3-EVO before 21.3R3-S5-EVO,\n  *  from 21.4-EVO before 21.4R3-S5-EVO,\n  *  from 22.1-EVO before 22.1R3-S4-EVO,\n  *  from 22.2-EVO before 22.2R3-S3-EVO,\n  *  from 22.3-EVO before 22.3R3-S1-EVO,\n  *  from 22.4-EVO before 22.4R3-EVO,\n  *  from 23.2-EVO before 23.2R2-EVO.","2023-09-01",7.5,"v3.1","High",0.18354,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":125},"CVE-2023-28983","An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4 version 21.4R1-EVO and later versions prior to 22.1R1-EVO.","2023-04-17",8.8,0.01482,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":130},"CVE-2020-1626","A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a pfemand process crash. The pfemand process is responsible for packet forwarding on the device. By continuously sending the packet flood, an attacker can repeatedly crash the pfemand process causing a sustained Denial of Service. This issue can only be triggered by traffic sent to the device. Transit traffic does not cause this issue. This issue affects all version of Junos OS Evolved prior to 19.1R1-EVO.","2020-04-08",0.01363,{"cveId":132,"description":133,"publishedDate":134,"cvssScore":135,"cvssVersion":117,"severity":136,"isKev":17,"epssScore":137},"CVE-2021-0211","An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain leading to disruptions in network traffic causing a Denial of Service (DoS) condition. Continued receipt of these update messages will cause a sustained Denial of Service condition. This issue affects Juniper Networks: Junos OS: All versions prior to 17.3R3-S10 with the exceptions of 15.1X49-D240 on SRX Series and 15.1R7-S8 on EX Series; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R1-S3, 19.4R2-S3, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S3 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2. Junos OS Evolved: All versions prior to 20.3R1-S1-EVO, 20.3R2-EVO.","2021-01-15",10,"Critical",0.01333,{"cveId":139,"description":140,"publishedDate":129,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":141},"CVE-2020-1638","The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restart. When this issue occurs, all traffic via the FPC will be dropped. By continuously sending this specific IPv4 packet, an attacker can repeatedly crash the FPC, causing an extended Denial of Service (DoS) condition. This issue can only occur when processing a specific IPv4 packet. IPv6 packets cannot trigger this issue. This issue affects: Juniper Networks Junos OS on MX Series with MPC10E or MPC11E and PTX10001: 19.2 versions prior to 19.2R1-S4, 19.2R2; 19.3 versions prior to 19.3R2-S2, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2. Juniper Networks Junos OS Evolved on on QFX5220, and PTX10003 series: 19.2-EVO versions; 19.3-EVO versions; 19.4-EVO versions prior to 19.4R2-EVO. This issue does not affect Junos OS versions prior to 19.2R1. This issue does not affect Junos OS Evolved versions prior to 19.2R1-EVO.",0.0132,{"cveId":143,"description":144,"publishedDate":145,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":146},"CVE-2020-1648","On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an extended Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 18.2X75 versions starting from 18.2X75-D50.8, 18.2X75-D60 and later versions, prior to 18.2X75-D52.8, 18.2X75-D53, 18.2X75-D60.2, 18.2X75-D65.1, 18.2X75-D70; 19.4 versions 19.4R1 and 19.4R1-S1; 20.1 versions prior to 20.1R1-S2, 20.1R2. Juniper Networks Junos OS Evolved: 19.4-EVO versions prior to 19.4R2-S2-EVO; 20.1-EVO versions prior to 20.1R2-EVO. This issue does not affect: Juniper Networks Junos OS releases prior to 19.4R1. Juniper Networks Junos OS Evolved releases prior to 19.4R1-EVO.","2020-07-17",0.01276,{"cveId":148,"description":149,"publishedDate":145,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":146},"CVE-2020-1644","On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process (RPD) crash and restart. This issue affects both IBGP and EBGP multihop deployment in IPv4 or IPv6 network. This issue affects: Juniper Networks Junos OS: 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S4; 18.2X75 versions prior to 18.2X75-D13, 18.2X75-D411.1, 18.2X75-D420.18, 18.2X75-D52.3, 18.2X75-D60; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S2, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. Juniper Networks Junos OS Evolved: any releases prior to 20.1R2-EVO. This issue does not affect Juniper Networks Junos OS releases prior to 17.3R1.",{"cveId":151,"description":152,"publishedDate":153,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":154},"CVE-2021-31353","An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specific BGP update, causing the routing protocol daemon (RPD) to crash and restart, leading to a Denial of Service (DoS). Continued receipt and processing of the BGP update will create a sustained Denial of Service (DoS) condition. This issue affects very specific versions of Juniper Networks Junos OS: 19.3R3-S2; 19.4R3-S3; 20.2 versions 20.2R2-S3 and later, prior to 20.2R3-S2; 20.3 versions 20.3R2 and later, prior to 20.3R3; 20.4 versions 20.4R2 and later, prior to 20.4R3; 21.1 versions prior to 21.1R2. Juniper Networks Junos OS 20.1 is not affected by this issue. This issue also affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R2-S3-EVO, 20.4R3-EVO; 21.1-EVO versions prior to 21.1R2-EVO; 21.2-EVO versions prior to 21.2R2-EVO.","2021-10-19",0.01167,{"cveId":156,"description":157,"publishedDate":158,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":159},"CVE-2022-22197","An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker with an established BGP session to cause a Denial of Service (DoS). This issue occurs when proxy-generate route-target filtering is enabled, and certain proxy-route add and delete events are happening. This issue affects: Juniper Networks Junos OS All versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S8, 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S2, 20.3R2. Juniper Networks Junos OS Evolved All versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R3-EVO; 20.3 versions prior to 20.3R2-EVO.","2022-04-14",0.01116,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":164,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":165},"CVE-2020-1632","In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service (DoS) condition. For example, Router A sends a specific BGP UPDATE to Router B, causing Router B to send an invalid BGP UPDATE message to Router C, resulting in termination of the BGP session between Router B and Router C. This issue might occur when there is at least a single BGP session established on the device that does not support 4 Byte AS extension (RFC 4893). Repeated receipt of the same BGP UPDATE can result in an extended DoS condition. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2; 17.2 versions prior to 17.2R1-S9, 17.2R2-S8, 17.2R3-S3; 17.2X75 versions prior to 17.2X75-D105, 17.2X75-D110, 17.2X75-D44; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2-S6, 18.2R3-S2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D411, 18.2X75-D420, 18.2X75-D51, 18.2X75-D60; 18.3 versions prior to 18.3R1-S6, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S5, 18.4R3; 18.4 version 18.4R2 and later versions; 19.1 versions prior to 19.1R1-S3, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2. This issue does not affect Juniper Networks Junos OS prior to 16.1R1. This issue affects Juniper Networks Junos OS Evolved prior to 19.2R2-EVO.","2020-04-15",8.6,0.01062,[],{"title":168,"metaDescription":169,"keywords":170,"structuredData":171},"Junos Os Evolved by Juniper - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Junos Os Evolved by Juniper covering 25 versions with 157 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Junos Os Evolved vulnerabilities, Junos Os Evolved security, Junos Os Evolved CVE, Juniper Junos Os Evolved, Junos Os Evolved threat intelligence, Juniper security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":172,"@type":173,"name":174,"description":169,"url":175,"manufacturer":176,"applicationCategory":180,"softwareVersion":181,"mainEntity":182},"https:\u002F\u002Fschema.org","SoftwareApplication","Junos Os Evolved","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fjuniper\u002Fjunos_os_evolved",{"@type":177,"name":178,"url":179},"Organization","Juniper","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fjuniper","Security Software","25 versions tracked",{"@type":183,"name":184,"description":185,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Junos Os Evolved Security Vulnerabilities","Security vulnerabilities affecting Junos Os Evolved by Juniper",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":187,"apiVersion":188},"2026-10-17T16:39:20.608Z","3.0",{"rows":190,"total":11,"capped":17,"failed":11},[],[]]