Ex3200
Vendor:
First CVE: Mar 31, 2015 · Active for 11 years
19
Total CVEs
More Total CVEs than 93% of tracked products
2.4
Avg CVEs / Year
Higher CVE frequency than 74% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 40% of tracked products
15.8%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Ex3200 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 31, 2015
11 years ago
Most Recent CVE
Jan 25, 2024
911 days ago
CVE Severity & Scoring
Ex320019 CVEs
53%
37%
11%
All CVEs352,101 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (10.5%)
Network13 (68.4%)
Unknown1 (5.3%)
Physical0 (0.0%)
Adjacent Network3 (15.8%)
Attack Complexity
Low14 (73.7%)
High4 (21.1%)
Unknown1 (5.3%)
User Interaction
None16 (84.2%)
Unknown1 (5.3%)
Required2 (10.5%)
Privileges Required
Low2 (10.5%)
High0 (0.0%)
None16 (84.2%)
Unknown1 (5.3%)
Top CVEs
Signals from CVEs in this product scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-36844MEDIUM A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, importan | Aug 17, 2023 | 5.3 | 95 | YES | YES |
CVE-2023-36847MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to | Aug 17, 2023 | 5.3 | 91 | YES | NO |
CVE-2023-36851MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Sep 27, 2023 | 5.3 | 57 | YES | NO |
CVE-2014-9708MEDIUM Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demons | Mar 31, 2015 | 5.0 | 42 | NO | NO |
CVE-2021-0211CRITICAL An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid B | Jan 15, 2021 | 10.0 | 31 | NO | NO |
CVE-2017-10615CRITICAL A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code | Oct 13, 2017 | 9.8 | 31 | NO | NO |
CVE-2019-0062HIGH A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentiall | Oct 9, 2019 | 8.8 | 28 | NO | NO |
CVE-2018-0043HIGH Receipt of a specific MPLS packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execution. By continuously sending specific MP | Oct 10, 2018 | 8.8 | 27 | NO | NO |
CVE-2024-21619HIGH A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks | Jan 25, 2024 | 7.5 | 25 | NO | NO |
CVE-2018-0049HIGH A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash. Continued receipt of this specifically crafted malic | Oct 10, 2018 | 7.5 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (19 CVEs).
CISA KEV
3 CVEs
15.8% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
5.3% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (19 CVEs).
Media Mentions
Signals from CVEs in this product scope (19 CVEs).
Top CNAs Publishing CVEs For Ex3200
Top CWEs
Versions
No cataloged versions.