Session Smart Router
Approved changes feed: RSS · Atom
cpe:2.3:a:juniper_networks:session_smart_router:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Juniper Networks (75c1b4ad-b137-51c1-bf9a-3bc90c5e98be) |
|---|---|
| Product | Session Smart Router (e2fa940f-8cf5-54bf-a3e3-8b8b48f4942f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-106079 |
vulnerable | 2026-11-03 10:16:14.117887 |
Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
HIGH (8.8)
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.
Published: 2026-10-28T16:37:49.668Z
Updated: 2026-11-05T19:14:12.120Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103410 |
vulnerable | 2026-11-03 10:15:49.453770 |
Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection
HIGH (7.5)
An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate.
Published: 2026-10-28T16:37:17.946Z
Updated: 2026-10-29T01:52:03.380Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103408 |
vulnerable | 2026-11-03 10:15:49.446647 |
Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options
HIGH (8.8)
A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply.
Published: 2026-10-28T16:36:33.095Z
Updated: 2026-11-06T18:30:04.638Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103394 |
vulnerable | 2026-11-03 10:15:49.346983 |
Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
LOW (3.7)
An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment.
Published: 2026-10-28T16:34:16.486Z
Updated: 2026-10-29T01:52:03.984Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103400 |
vulnerable | 2026-11-03 10:15:49.337677 |
Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup
MEDIUM (5.5)
An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of service via the creation of specially named directories and a service restart.
Published: 2026-10-28T16:34:29.792Z
Updated: 2026-10-29T01:52:03.696Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103390 |
vulnerable | 2026-11-03 10:15:49.264595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103401 |
vulnerable | 2026-11-03 10:15:49.227828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103405 |
vulnerable | 2026-11-03 10:15:49.161524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103391 |
vulnerable | 2026-11-03 10:15:49.155530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103411 |
vulnerable | 2026-11-03 10:15:49.086483 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103409 |
vulnerable | 2026-11-03 10:15:49.083848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103403 |
vulnerable | 2026-11-03 10:15:48.574258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103393 |
vulnerable | 2026-11-03 10:15:48.546010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103407 |
vulnerable | 2026-11-03 10:15:48.544685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103402 |
vulnerable | 2026-11-03 10:15:48.381437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-103392 |
vulnerable | 2026-11-03 10:15:48.326016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21589 |
vulnerable | 2026-06-08 07:08:56.684809 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2973 |
vulnerable | 2026-06-08 06:35:27.874273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.