Known vulnerabilities in Junos OS Evolved 20.4R3-S4-EVO - page 2

Vendor: Juniper Networks, Inc.
Software: Junos OS Evolved
Version: 20.4R3-S4-EVO
Software CPE: cpe:2.3:o:juniper_networks:junos_os_evolved:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 36
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Junos OS Evolved version 20.4R3-S4-EVO Junos OS Evolved 20.4R3-S4-EVO is affected by 36 vulnerabilities: 21 medium, 15 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81667 - Improper input validation
CVE-2017-7653		 CWE-20 Medium
No
No
 20.4R3-S7-EVO, 21.4R3-S4-EVO, 22.1R3-EVO, 22.2R3-EVO, 22.3R2-EVO, 22.4R1-EVO 06.10.2023 SB2019032712
SB2023100601
SB2018101411
#VU81666 - Missing release of memory after effective lifetime
CVE-2017-7654		 CWE-401 Medium
No
No
 20.4R3-S7-EVO, 21.4R3-S4-EVO, 22.1R3-EVO, 22.2R3-EVO, 22.3R2-EVO, 22.4R1-EVO 06.10.2023 SB2019032712
SB2023100601
SB2018101411
#VU80111 - Improper input validation
CVE-2023-4481		 CWE-20 Medium
No
No
 - 29.08.2023 SB2023082953
#VU78281 - Reachable Assertion
CVE-2023-36840		 CWE-617 Low
No
No
 20.4R3-S7-EVO, 21.4R3-EVO, 22.1R3-EVO, 22.2R2-EVO, 22.3R2-EVO, 22.4R1-EVO 16.07.2023 SB2023071609
#VU78263 - Use of Uninitialized Resource
CVE-2023-36836		 CWE-908 Low
No
No
 20.4R3-S6-EVO, 21.3R3-S1-EVO, 21.4R3-EVO, 22.1R1-S2-EVO, 22.1R2-EVO, 22.2R2-EVO, 22.3R1-EVO 14.07.2023 SB2023071429
#VU77650 - Improper input validation
CVE-2023-0026		 CWE-20 Medium
No
No
 20.4R3-S8-EVO 22.06.2023 SB2023062279
#VU75134 - Missing release of memory after effective lifetime
CVE-2023-28982		 CWE-401 Medium
No
No
 20.4R3-S6-EVO, 21.2R3-EVO, 21.3R2-EVO, 21.4R1-EVO 14.04.2023 SB2023041445
#VU75131 - Improper input validation
CVE-2023-28981		 CWE-20 Low
No
No
 20.4R3-S6-EVO, 21.3R3-EVO, 21.4R2-EVO, 22.1R2-EVO, 22.2R1-EVO 14.04.2023 SB2023041444
#VU75130 - Insecure Default Variable Initialization
CVE-2023-28978		 CWE-453 Medium
No
No
 20.4R3-S7-EVO, 21.1R3-S4-EVO, 21.2R3-S5-EVO, 21.4R3-S1-EVO, 22.2R2-EVO, 22.3R1-EVO 14.04.2023 SB2023041443
#VU75124 - Incorrect Default Permissions
CVE-2023-28966		 CWE-276 Low
No
No
 20.4R3-S5-EVO, 21.2R3-EVO, 21.3R2-EVO, 21.4R1-EVO 14.04.2023 SB2023041442
#VU75117 - Improper Authorization
CVE-2023-28973		 CWE-285 Low
No
No
 20.4R3-S5-EVO, 21.2R3-EVO, 21.3R2-EVO, 21.4R1-S2-EVO, 21.4R2-EVO, 22.1R1-EVO 14.04.2023 SB2023041439
#VU75116 - Incorrect Permission Assignment for Critical Resource
CVE-2023-28960		 CWE-732 Low
No
No
 20.4R3-S5-EVO, 21.2R3-EVO, 21.3R3-EVO, 21.4R2-EVO, 22.1R1-EVO 14.04.2023 SB2023041438
#VU75092 - Use After Free
CVE-2023-28980		 CWE-416 Low
No
No
 20.4R3-S6-EVO, 21.2R3-S4-EVO, 21.3R3-S1-EVO, 21.4R2-S1-EVO, 21.4R3-EVO, 22.1R2-EVO, 22.2R1-EVO 13.04.2023 SB2023041341
#VU68562 - Execution with Unnecessary Privileges
CVE-2022-22239		 CWE-250 Low
No
No
 20.4R3-S5-EVO, 21.1R3-EVO, 21.2R2-S1-EVO, 21.2R3-EVO, 21.3R2-EVO, 21.4R1-EVO 21.10.2022 SB2022102104
#VU68365 - Improper input validation
CVE-2022-22230		 CWE-20 Medium
No
No
 20.4R3-S5-EVO, 21.1R3-S2-EVO, 21.2R3-S1-EVO, 21.3R3-S2-EVO, 21.4R2-EVO, 22.1R2-EVO, 22.2R2-EVO, 22.3R1-EVO 17.10.2022 SB2022101728
#VU18088 - NULL Pointer Dereference
CVE-2017-7655		 CWE-476 Medium
No
No
 20.4R3-S7-EVO, 21.4R3-S4-EVO, 22.1R3-EVO, 22.2R3-EVO, 22.3R2-EVO, 22.4R1-EVO 28.03.2019 SB2019032712
SB2023100601


Showing elements 21 - 40 out of 36