DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Juniper Produkte: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-04-12
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper QFX Series, Juniper SRX Series und Juniper MX Series ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Daten zu manipulieren.
01
beschreibt (25)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-28984US | — | — | ||
A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet Forwarding… | ||||
| CVE-2023-28983US | — | — | ||
An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, networ… | ||||
| CVE-2023-28982US | — | — | ||
A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, netwo… | ||||
| CVE-2023-28981US | — | — | ||
An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service… | ||||
| CVE-2023-28980US | — | — | ||
A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause… | ||||
| CVE-2023-28979US | medium4.7 | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity… | ||||
| CVE-2023-28978US | —OT erhöht | — | ||
An Insecure Default Initialization of Resource vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to read certain confidential inf… | ||||
| CVE-2023-28976US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, net… | ||||
| CVE-2023-28975US | — | — | ||
An Unexpected Status Code or Return Value vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated attacker with physical access to the device to cause a… | ||||
| CVE-2023-28974US | medium6.5 | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of… | ||||
| CVE-2023-28973US | — | — | ||
An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a local, authenticated attacker to execute administrative comma… | ||||
| CVE-2023-28972US | — | — | ||
An Improper Link Resolution Before File Access vulnerability in console port access of Juniper Networks Junos OS on NFX Series allows an attacker to bypass console access controls.… | ||||
| CVE-2023-28971US | — | — | ||
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance (PAA) (Formerly Netroun… | ||||
| CVE-2023-28970US | — | — | ||
An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector applianc… | ||||
| CVE-2023-28968US | — | — | ||
An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) Application Signature component of Junos O… | ||||
| CVE-2023-28967US | — | — | ||
A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-base… | ||||
| CVE-2023-28966US | —OT erhöht | — | ||
An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute com… | ||||
| CVE-2023-28965US | high7.5 | — | ||
An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to cause a D… | ||||
| CVE-2023-28964US | — | — | ||
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network based,… | ||||
| CVE-2023-28963US | — | — | ||
An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitr… | ||||
20 von 25 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Juniper Security Advisory vom 2023-04-12external
- Juniper Security Advisory vom 2023-04-12external
- Juniper Security Advisory vom 2023-04-12external
- Juniper Security Advisory vom 2023-04-12external
- Juniper Security Advisory vom 2023-04-12external
- Juniper Security Advisory vom 2023-04-12external
- Juniper Security Advisory vom 2023-04-12external
- Juniper Security Advisory vom 2023-04-12external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan