SRX

Security researchers are flagging seven critical vulnerabilities in Juniper's Junos OS, all rated CVSS 9.8 and exploitable without authentication. The flaws include a heap overflow in the sdxd service, an auth bypass in J-Web/NETCONF, denial-of-service heap overflows affecting SRX devices, a TACACS privilege escalation from low-privilege access to root, and stack overflows in BGP/EVPN handling. Administrators of Juniper network gear are being urged to patch quickly.