Mx104
Vendor:
First CVE: Jan 16, 2015 · Active for 11 years
60
Total CVEs
More Total CVEs than 98% of tracked products
6.7
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mx104 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 16, 2015
11 years ago
Most Recent CVE
Jul 11, 2024
744 days ago
CVE Severity & Scoring
Mx10460 CVEs
53%
45%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local3 (5.0%)
Network38 (63.3%)
Unknown2 (3.3%)
Physical0 (0.0%)
Adjacent Network17 (28.3%)
Attack Complexity
Low54 (90.0%)
High4 (6.7%)
Unknown2 (3.3%)
User Interaction
None58 (96.7%)
Unknown2 (3.3%)
Required0 (0.0%)
Privileges Required
Low5 (8.3%)
High0 (0.0%)
None53 (88.3%)
Unknown2 (3.3%)
Top CVEs
Signals from CVEs in this product scope (60 CVEs).
60 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-9708MEDIUM Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demons | Mar 31, 2015 | 5.0 | 42 | NO | NO |
CVE-2019-0007CRITICAL The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which r | Jan 15, 2019 | 10.0 | 32 | NO | NO |
CVE-2021-0251HIGH A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery (CPCD) services daemon (cpcd) of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC | Apr 22, 2021 | 8.6 | 27 | NO | NO |
CVE-2022-22161HIGH An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device | Jan 19, 2022 | 7.5 | 25 | NO | NO |
CVE-2020-1650HIGH On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sendin | Jul 17, 2020 | 7.5 | 25 | NO | NO |
CVE-2019-0063HIGH When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted | Oct 9, 2019 | 7.5 | 25 | NO | NO |
CVE-2018-15504HIGH An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL poin | Aug 18, 2018 | 7.5 | 25 | NO | NO |
CVE-2023-22416HIGH A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SR | Jan 13, 2023 | 7.5 | 24 | NO | NO |
CVE-2023-22415HIGH An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Ser | Jan 13, 2023 | 7.5 | 24 | NO | NO |
CVE-2023-22413HIGH An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause De | Jan 13, 2023 | 7.5 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (60 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (60 CVEs).
Media Mentions
Signals from CVEs in this product scope (60 CVEs).
Top CNAs Publishing CVEs For Mx104
Top CWEs
Versions
No cataloged versions.