Srx5000
Vendor:
First CVE: Mar 31, 2015 · Active for 11 years
52
Total CVEs
More Total CVEs than 98% of tracked products
5.8
Avg CVEs / Year
Higher CVE frequency than 90% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 42% of tracked products
5.8%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Srx5000 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 31, 2015
11 years ago
Most Recent CVE
Jul 11, 2024
743 days ago
CVE Severity & Scoring
Srx500052 CVEs
35%
60%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local4 (7.7%)
Network45 (86.5%)
Unknown1 (1.9%)
Physical0 (0.0%)
Adjacent Network2 (3.8%)
Attack Complexity
Low47 (90.4%)
High4 (7.7%)
Unknown1 (1.9%)
User Interaction
None49 (94.2%)
Unknown1 (1.9%)
Required2 (3.8%)
Privileges Required
Low5 (9.6%)
High2 (3.8%)
None44 (84.6%)
Unknown1 (1.9%)
Top CVEs
Signals from CVEs in this product scope (52 CVEs).
52 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-36845CRITICAL A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series
and SRX Series
allows an unauthenticated, network-based attacker to remote | Aug 17, 2023 | 9.8 | 98 | YES | YES |
CVE-2023-36846MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Aug 17, 2023 | 5.3 | 93 | YES | NO |
CVE-2023-36851MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Sep 27, 2023 | 5.3 | 57 | YES | NO |
CVE-2016-1286HIGH named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature r | Mar 9, 2016 | 8.6 | 56 | NO | NO |
CVE-2016-1285MEDIUM named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a | Mar 9, 2016 | 6.8 | 56 | NO | NO |
CVE-2014-9708MEDIUM Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demons | Mar 31, 2015 | 5.0 | 42 | NO | NO |
CVE-2017-3145HIGH BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and cr | Jan 16, 2019 | 7.5 | 38 | NO | NO |
CVE-2021-0211CRITICAL An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid B | Jan 15, 2021 | 10.0 | 31 | NO | NO |
CVE-2022-22167CRITICAL A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules | Jan 19, 2022 | 9.8 | 30 | NO | NO |
CVE-2024-21619HIGH A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks | Jan 25, 2024 | 7.5 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (52 CVEs).
CISA KEV
3 CVEs
5.8% of CVEs· 97th percentile
Metasploit
1 CVE
1.9% of CVEs· 96th percentile
Nuclei
1 CVE
1.9% of CVEs· 96th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (52 CVEs).
Media Mentions
Signals from CVEs in this product scope (52 CVEs).
Top CNAs Publishing CVEs For Srx5000
Top CWEs
Versions
No cataloged versions.