CRITICAL🇵🇱 Wersja polska

CVE-2021-0211

CVSS 10.0v3.1pub. 2021-01-15upd. 2024-11-21

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain leading to disruptions in network traffic causing a Denial of Service (DoS) condition. Continued receipt of these update messages will cause a sustained Denial of Service condition. This issue affects Juniper Networks: Junos OS: All versions prior to 17.3R3-S10 with the exceptions of 15.1X49-D240 on SRX Series and 15.1R7-S8 on EX Series; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R1-S3, 19.4R2-S3, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S3 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2. Junos OS Evolved: All versions prior to 20.3R1-S1-EVO, 20.3R2-EVO.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

  • Juniper Ex2200

    HW
    Juniper
    all versions

  • Juniper Ex2200 C

    HW
    Juniper
    all versions

  • Juniper Ex2200 Vc

    HW
    Juniper
    all versions

  • Juniper Ex2300

    HW
    Juniper
    all versions

  • Juniper Ex2300 C

    HW
    Juniper
    all versions

  • Juniper Ex2300m

    HW
    Juniper
    all versions

  • Juniper Ex3200

    HW
    Juniper
    all versions

  • Juniper Ex3300

    HW
    Juniper
    all versions

  • Juniper Ex3300 Vc

    HW
    Juniper
    all versions

  • Juniper Ex3400

    HW
    Juniper
    all versions

  • Juniper Ex4200

    HW
    Juniper
    all versions

  • Juniper Ex4200 Vc

    HW
    Juniper
    all versions

  • Juniper Ex4300

    HW
    Juniper
    all versions

  • Juniper Ex4300 24p

    HW
    Juniper
    all versions

  • Juniper Ex4300 24p S

    HW
    Juniper
    all versions

  • Juniper Ex4300 24t

    HW
    Juniper
    all versions

  • Juniper Ex4300 24t S

    HW
    Juniper
    all versions

  • Juniper Ex4300 32f

    HW
    Juniper
    all versions

  • Juniper Ex4300 32f Dc

    HW
    Juniper
    all versions

  • Juniper Ex4300 32f S

    HW
    Juniper
    all versions

  • Juniper Ex4300 48mp

    HW
    Juniper
    all versions

  • Juniper Ex4300 48mp S

    HW
    Juniper
    all versions

  • Juniper Ex4300 48p

    HW
    Juniper
    all versions

  • Juniper Ex4300 48p S

    HW
    Juniper
    all versions

  • Juniper Ex4300 48t

    HW
    Juniper
    all versions

  • Juniper Ex4300 48tafi

    HW
    Juniper
    all versions

  • Juniper Ex4300 48t Afi

    HW
    Juniper
    all versions

  • Juniper Ex4300 48tdc

    HW
    Juniper
    all versions

  • Juniper Ex4300 48t Dc

    HW
    Juniper
    all versions

  • Juniper Ex4300 48tdc Afi

    HW
    Juniper
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2023-36845CRITICAL9.8⚠ KEVPL ✓same product

RCE przez modyfikację zmiennej PHP w J-Web Juniper Junos OS (EX/SRX)

CVE-2026-21902CRITICAL9.3PL ✓same product

RCE jako root w Juniper Junos OS Evolved — błędne uprawnienia do krytycznego zasobu

CVE-2024-21591CRITICAL9.8PL ✓same product

Out-of-bounds Write w J-Web Juniper Junos OS — RCE z uprawnieniami root

CVE-2021-0248CRITICAL10.0PL ✓same product

Hard-coded Credentials w Juniper Junos OS na urządzeniach NFX Series

CVE-2021-0254CRITICAL9.8PL ✓same product

Buffer overflow w usłudze overlayd Juniper Junos OS — RCE i DoS