Vmx
Vendor:
First CVE: Jan 16, 2015 · Active for 11 years
8
Total CVEs
More Total CVEs than 85% of tracked products
1.6
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Vmx over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 16, 2015
11 years ago
Most Recent CVE
Jan 19, 2022
1,647 days ago
CVE Severity & Scoring
Vmx8 CVEs
25%
50%
25%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network6 (75.0%)
Unknown1 (12.5%)
Physical0 (0.0%)
Adjacent Network1 (12.5%)
Attack Complexity
Low6 (75.0%)
High1 (12.5%)
Unknown1 (12.5%)
User Interaction
None7 (87.5%)
Unknown1 (12.5%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None7 (87.5%)
Unknown1 (12.5%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-0007CRITICAL The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which r | Jan 15, 2019 | 10.0 | 32 | NO | NO |
CVE-2020-1627HIGH A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service (DoS) by sending specific packets requiring special process | Apr 8, 2020 | 7.5 | 25 | NO | NO |
CVE-2019-0063HIGH When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted | Oct 9, 2019 | 7.5 | 25 | NO | NO |
CVE-2020-1615CRITICAL The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these default credentials by the admi | Apr 8, 2020 | 9.8 | 24 | NO | NO |
CVE-2019-0065HIGH On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending a crafted SIP packe | Oct 9, 2019 | 7.5 | 24 | NO | NO |
CVE-2022-22168MEDIUM An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigger a Missing Release | Jan 19, 2022 | 6.5 | 23 | NO | NO |
CVE-2014-6382HIGH The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband | Jan 16, 2015 | 7.1 | 23 | NO | NO |
CVE-2017-10611MEDIUM If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requ | Oct 13, 2017 | 5.9 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Vmx
Top CWEs
Versions
No cataloged versions.