Juniper Junose vulnerabilities

3 CVEs affecting Juniper Junose, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4925, published 2017-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-2074, published 2006-04-27. High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to the DNS "client code," as demonstrated by the OUSPG PROTOS…
CVE-2016-4925, published 2017-10-13. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover…
CVE-2013-7313, published 2014-01-23. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets…