References https://www.hkcert.org/tc/security-bulletin/juniper-junos-os-multiple-vulnerabilities_20250411 https://www.ithome.com.tw/news/175009 https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590 https://www.hkcert.org/tc/security-bulletin/juniper-junos-os-multiple-vulnerabilities_20250110 https://www.securityweek.com/juniper-networks-patches-dozens-of-junos-os-vulnerabilities/ https://app.opencve.io/cve/?vendor=juniper https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities_20251010 https://nvd.nist.gov/vuln/detail/CVE-2023-36845 https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590 https://www.cvedetails.com/product/3989/Juniper-Junos.html?vendor_id=874
Related VulnerabilitiesPoCCVE-2022-22242: Juniper Web Device Manager - Cross-Site ScriptingPoCCVE-2023-36844: Juniper Devices - Remote Code ExecutionPoCCVE-2023-36845: Juniper J-Web - Remote Code ExecutionPoCCVE-2022-22242: Juniper Networks Junos OS 错误页面反射 XSS 漏洞PoCjunos-xss: JunOS - Cross-Site ScriptingJuniper Networks Junos OS和Juniper Networks Junos OS Evolved 信息泄露漏洞Juniper Networks Junos OS SRX 信息泄露漏洞Juniper设备管理软件存在代码执行漏洞获取Cookie可登陆后台Juniper Networks Junos CVE-2023-36845 远程命令执行漏洞Juniper Devices CVE-2023-36844 远程代码执行漏洞Juniper Networks Junos 远程代码执行漏洞