Known vulnerabilities in Junos OS Evolved 23.4R1-S2-EVO

Vendor: Juniper Networks, Inc.
Software: Junos OS Evolved
Version: 23.4R1-S2-EVO
Software CPE: cpe:2.3:o:juniper_networks:junos_os_evolved:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Junos OS Evolved version 23.4R1-S2-EVO Junos OS Evolved 23.4R1-S2-EVO is affected by 16 vulnerabilities: 8 medium, 8 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130704 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-21919		 CWE-362 Low
No
No
 23.4R2-S5-EVO, 24.2R2-S1-EVO, 24.4R1-S3-EVO, 24.4R2-EVO, 25.2R1-EVO 08.05.2026 SB2026050828
#VU130702 - Command injection
CVE-2026-33791		 CWE-77 Low
No
No
 22.4R3-S8-EVO, 23.2R2-S5-EVO, 23.4R2-S7-EVO, 24.2R2-S2-EVO, 24.4R2-EVO, 25.2R1-S1-EVO, 25.2R2-EVO, 25.4R1-EVO 08.05.2026 SB2026050826
#VU130697 - Execution with Unnecessary Privileges
CVE-2026-33793		 CWE-250 Low
No
No
 22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S6-EVO, 24.2R2-EVO, 24.4R1-S1-EVO, 24.4R2-EVO, 25.2R1-EVO 08.05.2026 SB2026050824
#VU130696 - Missing Authorization
CVE-2026-33776		 CWE-862 Low
No
No
 23.2R2-S6-EVO, 23.4R2-S6-EVO, 24.2R2-S4-EVO, 24.4R2-S1-EVO, 25.2R2-EVO, 25.4R1-EVO 08.05.2026 SB2026050820
#VU130694 - Missing release of memory after effective lifetime
CVE-2026-33780		 CWE-401 Medium
No
No
 22.4R3-S5-EVO, 23.2R2-S3-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R1-EVO 08.05.2026 SB2026050819
#VU130693 - Missing Authentication for Critical Function
CVE-2026-33788		 CWE-306 Low
No
No
 21.2R3-S8-EVO, 21.4R3-S7-EVO, 22.2R3-S4-EVO, 22.3R3-S3-EVO, 22.4R3-S2-EVO, 23.2R2-EVO, 23.4R1-EVO 08.05.2026 SB2026050818
#VU130689 - Stack-based buffer overflow
CVE-2025-59969		 CWE-121 Low
No
No
 22.4R3-S8-EVO, 23.2R2-S5-EVO, 23.4R2-EVO, 24.2R2-EVO, 24.4R2-EVO, 25.2R1-EVO 08.05.2026 SB2026050813
#VU116934 - NULL Pointer Dereference
CVE-2025-59967		 CWE-476 Medium
No
No
 23.2R2-S4-EVO, 23.4R2-EVO, 24.2R1-EVO 13.10.2025 SB2025101393
#VU102533 - Out-of-bounds read
CVE-2025-21600		 CWE-125 Medium
No
No
 21.4R3-S9-EVO, 22.2R3-S5-EVO, 22.3R3-S4-EVO, 22.4R3-S5-EVO, 23.2R2-S3-EVO, 23.4R2-S2-EVO, 24.2R1-S2-EVO, 24.2R2-EVO, 24.4R1-EVO 10.01.2025 SB2025011032
#VU102532 - Improper Check or Handling of Exceptional Conditions
CVE-2025-21602		 CWE-703 Medium
No
No
 21.4R3-S9-EVO, 22.2R3-S5-EVO, 22.3R3-S4-EVO, 22.4R3-S5-EVO, 23.2R2-S3-EVO, 23.4R2-S3-EVO, 24.2R1-S2-EVO, 24.2R2-EVO, 24.4R1-EVO 10.01.2025 SB2025011027
#VU102530 - Out-of-bounds read
CVE-2025-21598		 CWE-125 Medium
No
No
 21.4R3-S9-EVO, 22.2R3-S5-EVO, 22.3R3-S4-EVO, 22.4R3-S5-EVO, 23.2R2-S2-EVO, 23.4R2-S1-EVO, 24.2R1-S2-EVO, 24.2R2-EVO, 24.4R1-EVO 10.01.2025 SB2025011026
#VU102521 - Improper control of a resource through its lifetime
CVE-2025-21593		 CWE-664 Medium
No
No
 21.2R3-S9-EVO, 21.4R3-S10-EVO, 22.2R3-S5-EVO, 22.3R3-S4-EVO, 22.4R3-S3-EVO, 23.2R2-S2-EVO, 23.4R2-EVO, 24.2R1-EVO 10.01.2025 SB2025011008
#VU102493 - Missing Release of Resource after Effective Lifetime
CVE-2025-21599		 CWE-772 Medium
No
No
 22.4R3-S5-EVO, 23.2R2-S2-EVO, 23.4R2-S2-EVO, 24.2R1-S2-EVO, 24.2R2-EVO, 24.4R1-EVO 09.01.2025 SB2025010941
#VU94643 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-39517		 CWE-754 Low
No
No
 21.4R3-S7-EVO, 22.1R3-S5-EVO, 22.2R3-S3-EVO, 22.3R3-S3-EVO, 22.4R3-S2-EVO, 23.2R2-EVO, 23.4R1-S1-EVO, 23.4R2-EVO 22.07.2024 SB2024072227
#VU94340 - Memory corruption
CVE-2024-39543		 CWE-119 Low
No
No
 21.2R3-S8-EVO, 21.4R3-S8-EVO, 22.2R3-S4-EVO, 22.3R3-S3-EVO, 22.4R3-S2-EVO, 23.2R2-S1-EVO, 23.4R2-EVO 15.07.2024 SB2024071530
#VU65671 - Out-of-bounds write
CVE-2022-24805		 CWE-787 Medium
No
No
 23.2R2-S6-EVO, 23.4R2-S8-EVO 21.07.2022 SB2022072138
SB2022072139
SB2022080133
and 19 more