Juniper Session And Resource Control vulnerabilities

4 CVEs affecting Juniper Session And Resource Control, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-31381, published 2021-10-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0960, published 2008-06-10. High severity, CVSS 10.0. EPSS: 68.8% chance of exploitation in the next 30 days. SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0…
CVE-2021-31381, published 2021-10-19. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete…
CVE-2021-31380, published 2021-10-19. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to…
CVE-2021-31352, published 2021-10-19. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain…