CVE-2022-22164— Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-22164
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.
Source: NVD (National Vulnerability Database)
Vulnerability Description
An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected, resulting in the telnet service staying enabled. When it is not intended to be operating on the device, an administrator can issue the following command to verify whether telnet is operating in the background: user@device > show system connections | grep :23 tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 20879/xinetd This issue affects: Juniper Networks Junos OS Evolved All versions prior to 20.4R2-S2-EVO; 21.1 version 21.1R1-EVO and later versions; 21.2 versions prior to 21.2R2-EVO.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
初始化不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Juniper Networks Junos OS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在安全漏洞，该漏洞源于不正确的初始化，用于禁用telnet服务的提交操作未按预期生效，导致telnet服务保持启用状态。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS Evolved | unspecified ~ 20.4R2-S2-EVO | - |
II. Public POCs for CVE-2022-22164
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-22164
请登录查看更多情报信息。
Same Patch Batch · Juniper Networks · 2022-01-19 · 27 CVEs total
| CVE-2022-22152 | 7.7 HIGH | Contrail Service Orchestration: Tenants able to see other tenants policies via REST API in |
| CVE-2022-22153 | 7.5 HIGH | SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high late |
| CVE-2022-22180 | 7.5 HIGH | Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to proces |
| CVE-2022-22178 | 7.5 HIGH | Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific |
| CVE-2022-22175 | 7.5 HIGH | Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled |
| CVE-2022-22174 | 7.5 HIGH | Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon |
| CVE-2022-22173 | 7.5 HIGH | Junos OS: CRL failing to download causes a memory leak and ultimately a DoS |
| CVE-2022-22171 | 7.5 HIGH | Junos OS: Specific packets over VXLAN cause FPC reset |
| CVE-2022-22170 | 7.5 HIGH | Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset |
| CVE-2022-22161 | 7.5 HIGH | Junos OS: MX104 might become unresponsive if the out-of-band management port receives a fl |
| CVE-2022-22159 | 7.5 HIGH | Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Servic |
| CVE-2022-22163 | 7.4 HIGH | Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet |
| CVE-2022-22176 | 7.4 HIGH | Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon re |
| CVE-2022-22162 | 7.3 HIGH | Junos OS: A low privileged user can elevate their privileges to the ones of the highest pr |
| CVE-2022-22167 | 7.2 HIGH | Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permi |
| CVE-2022-22157 | 7.2 HIGH | Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled |
| CVE-2022-22154 | 6.8 MEDIUM | Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing |
| CVE-2022-22172 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets a |
| CVE-2022-22160 | 6.5 MEDIUM | Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists a |
| CVE-2022-22156 | 6.5 MEDIUM | Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Junos OS Evolved
- CVE-2026-33783
Junos OS Evolved: PTX Series: If SRTE tunnels provisioned vi - CVE-2026-33788
Junos OS Evolved: Local, authenticated attacker can gain pri - CVE-2025-59969
Junos OS Evolved: QFX5000 Series and PTX Series: An attacker - CVE-2026-21902
Junos OS Evolved: PTX Series: A vulnerability allows a unaut - CVE-2026-21911
Junos OS Evolved: Flapping management interface causes MAC l
Same vendor: Juniper Networks
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33784
JSI Virtual Lightweight Collector: Default password is not r
V. Comments for CVE-2022-22164
No comments yet