CVSS: 7.5EPSS: 0%CPEs: 127EXPL: 0CVE-2020-1644 – Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets
https://notcve.org/view.php?id=CVE-2020-1644
17 Jul 2020 — On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process (RPD) crash and restart. This issue affects both IBGP and EBGP multihop deployment in IPv4 or IPv6 network. This issue affects: Juniper Networks Junos OS: 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions p... • https://kb.juniper.net/JSA11032 • CWE-20: Improper Input Validation CWE-703: Improper Check or Handling of Exceptional Conditions •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1626 – Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets
https://notcve.org/view.php?id=CVE-2020-1626
08 Apr 2020 — A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a pfemand process crash. The pfemand process is responsible for packet forwarding on the device. By continuously sending the packet flood, an attacker can repeatedly crash the pfemand process causing a sustained Denial of Service. This issue can only be triggered by traffic sent to the device. Transit traffic does not cause this ... • https://kb.juniper.net/JSA11005 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1624 – Junos OS Evolved: objmon logs may leak sensitive information
https://notcve.org/view.php?id=CVE-2020-1624
08 Apr 2020 — A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1. Un usuario local autenticado con shell puede obtener los valores de las contraseñas de inicio de sesión del hash y los secretos compartidos por medio de archivos de configuración objmon sin procesar. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.1R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1623 – Junos OS Evolved: ev.ops file may leak sensitive information
https://notcve.org/view.php?id=CVE-2020-1623
08 Apr 2020 — A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file. This issue affects all versions of Junos OS Evolved prior to 19.2R1. Un usuario local autenticado con shell puede visualizar información de configuración confidencial por medio del archivo de configuración ev.ops. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.2R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1622 – Junos OS Evolved: EvoSharedObjStore may leak sensitive information
https://notcve.org/view.php?id=CVE-2020-1622
08 Apr 2020 — A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evolved prior to 19.1R1. Un usuario local autenticado con shell puede obtener los valores de las contraseñas de inicio de sesión del hash y los secretos compartidos por medio de EvoSharedObjStore. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.1R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File CWE-664: Improper Control of a Resource Through its Lifetime •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1621 – Junos OS Evolved: Configd leaks hashes via stream and is world readable
https://notcve.org/view.php?id=CVE-2020-1621
08 Apr 2020 — A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1. Un usuario local autenticado con shell puede obtener los valores de las contraseñas de inicio de sesión del hash por medio de trazas del configd. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.3R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File CWE-664: Improper Control of a Resource Through its Lifetime •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1620 – Junos OS Evolved: Configd leaks hashes via log file and is world readable
https://notcve.org/view.php?id=CVE-2020-1620
08 Apr 2020 — A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1. Un usuario autenticado local con shell puede obtener los valores de las contraseñas de inicio de sesión del hash por medio del registro configd streamer. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.3R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File CWE-664: Improper Control of a Resource Through its Lifetime •