Mx10
Vendor:
First CVE: Jan 16, 2015 · Active for 11 years
59
Total CVEs
More Total CVEs than 98% of tracked products
6.6
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 34% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mx10 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 16, 2015
11 years ago
Most Recent CVE
Jul 11, 2024
743 days ago
CVE Severity & Scoring
Mx1059 CVEs
54%
44%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local3 (5.1%)
Network37 (62.7%)
Unknown2 (3.4%)
Physical0 (0.0%)
Adjacent Network17 (28.8%)
Attack Complexity
Low53 (89.8%)
High4 (6.8%)
Unknown2 (3.4%)
User Interaction
None57 (96.6%)
Unknown2 (3.4%)
Required0 (0.0%)
Privileges Required
Low5 (8.5%)
High0 (0.0%)
None52 (88.1%)
Unknown2 (3.4%)
Top CVEs
Signals from CVEs in this product scope (59 CVEs).
59 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-9708MEDIUM Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demons | Mar 31, 2015 | 5.0 | 42 | NO | NO |
CVE-2019-0007CRITICAL The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which r | Jan 15, 2019 | 10.0 | 32 | NO | NO |
CVE-2021-0251HIGH A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery (CPCD) services daemon (cpcd) of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC | Apr 22, 2021 | 8.6 | 27 | NO | NO |
CVE-2020-1650HIGH On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sendin | Jul 17, 2020 | 7.5 | 25 | NO | NO |
CVE-2019-0063HIGH When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted | Oct 9, 2019 | 7.5 | 25 | NO | NO |
CVE-2018-15504HIGH An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL poin | Aug 18, 2018 | 7.5 | 25 | NO | NO |
CVE-2023-22416HIGH A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SR | Jan 13, 2023 | 7.5 | 24 | NO | NO |
CVE-2023-22415HIGH An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Ser | Jan 13, 2023 | 7.5 | 24 | NO | NO |
CVE-2023-22413HIGH An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause De | Jan 13, 2023 | 7.5 | 24 | NO | NO |
CVE-2023-22412HIGH An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based attack | Jan 13, 2023 | 7.5 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (59 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (59 CVEs).
Media Mentions
Signals from CVEs in this product scope (59 CVEs).
Top CNAs Publishing CVEs For Mx10
Top CWEs
Versions
No cataloged versions.