Corero SmartWall Threat Defense Director 11.x
CORERO-SMARTWALL-TDD-11.XJuniper · OS release · Corero SmartWall Threat Defense Director Series
No security fixes since · 136 days ago
Corero SmartWall Threat Defense Director 11.x stopped receiving security fixes on (136 days ago); general support continues until (in 229 days).
- Notice published
- 4y 3mo ago
- End of software maintenance
- 4mo ago
- End of security support
- 4mo ago
- End of support
- in 8mo
Lifecycle Milestones
| Lifecycle notice published | 4y 3mo ago | |
|---|---|---|
| End of software maintenance | 4mo ago | |
| End of security vulnerability support | 4mo ago | |
| Last date of support | in 8mo |
Known Exploited Vulnerabilities
6 CVEs in CISA's Known Exploited Vulnerabilities catalog are recorded against the Juniper platform this release belongs to and may apply to this release; verify against the vendor advisory before acting. Juniper security vulnerability support for this release stopped on . Where one applies, upgrade, isolate, or compensate.
| CVE | KEV added | Vulnerability | Flags |
|---|---|---|---|
CVE-2025-21590
|
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
KEV added 2025-03-13
|
||
CVE-2023-36844
|
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
KEV added 2023-11-13
|
||
CVE-2023-36845
|
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
KEV added 2023-11-13
|
||
CVE-2023-36846
|
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
KEV added 2023-11-13
|
||
CVE-2023-36847
|
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
KEV added 2023-11-13
|
||
CVE-2023-36851
|
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
KEV added 2023-11-13
|
Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.
Correlation is at the platform level, not per-OS-version (entries disclosed well before this release train shipped are left out). Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.
Is Corero SmartWall Threat Defense Director 11.x still maintained?
Not for security. Juniper stopped security fixes for Corero SmartWall Threat Defense Director 11.x on 2026-06-27; general support continues until 2027-06-27. A device on this release gets no patches for vulnerabilities disclosed after that date. Plan an upgrade to a maintained release. See Juniper's lifecycle bulletin.
When do security fixes for Corero SmartWall Threat Defense Director 11.x stop?
Juniper stopped engineering fixes for Corero SmartWall Threat Defense Director 11.x, including security patches, on 2026-06-27. A device on this release cannot be patched against vulnerabilities disclosed after that date without upgrading.
What should I upgrade Corero SmartWall Threat Defense Director 11.x to?
Upgrade to a currently maintained Juniper release. Check Juniper's release notes for the recommended version.
Which known-exploited CVEs may apply to the Corero SmartWall Threat Defense Director 11.x?
6 CVEs in CISA's Known Exploited Vulnerabilities catalog are recorded against Juniper Corero SmartWall Threat Defense Director and may apply to Corero SmartWall Threat Defense Director 11.x, whose security fixes stopped on 2026-06-27. Verify each against the vendor advisory for the fixed releases before acting. See the Known Exploited Vulnerabilities table for the full list.
Corero SmartWall Threat Defense Director 11.x Release Lifecycle
Corero SmartWall Threat Defense Director 11.x is a Juniper Corero SmartWall Threat Defense Director software release. Releases are maintained on a fixed schedule: Juniper ships fixes and security patches until the release reaches end of engineering, after which a device must be upgraded to a maintained release to stay patchable. The dates below are milestones for the software train, not for any specific appliance — hardware running this release has its own separate lifecycle. Juniper stopped security fixes for this release on ; general support continues until . Devices running it should be upgraded to a maintained release.