Juniper Junos advisory ties bugs to routing control
Juniper published an advisory covering 106 Junos OS and Junos OS Evolved flaws, including 9 critical issues, across many release lines. The affected builds span multiple Junos trains; INCIBE-CERT says the bugs can lead to root-level code execution, authentication bypass, information disclosure, service denial, and control of the device.
Several of the critical flaws sit in paths routers treat as trusted: configured BGP or BGP/EVPN peers, plus management components such as J-Web and NETCONF. In plain terms, a crafted routing update or web request can be accepted as if it came from a neighbor or logged-in admin, which is how a router can move from a bug to control-plane compromise.
For operators running Junos at the edge or in carrier cores, the exposure is not just one box crashing. A compromised routing engine can change path selection, blackhole traffic, or leak routes, and systems that expose peer or management interfaces inherit that trust risk until the affected releases are replaced.
Juniper Networks: risolte vulnerabilità in Junos OS e Junos OS Evolved
Juniper Networks ha rilasciato aggiornamenti per risolvere numerose vulnerabilità, di cui 23 con gravità "critica" e 119 con gravità “alta”, nei sistemi operativi Junos OS e Junos OS Evolved.