PT-2021-19259 · Juniper Networks · Junos Evolved+1

Published

2021-10-19

·

Updated

2022-10-27

·

CVE-2021-31360

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1R7-S10 Juniper Networks Junos OS versions prior to 17.4R3-S5 Juniper Networks Junos OS versions prior to 18.3R3-S5 Juniper Networks Junos OS versions prior to 18.4R3-S9 Juniper Networks Junos OS versions prior to 19.1R3-S6 Juniper Networks Junos OS versions prior to 19.2R1-S7 Juniper Networks Junos OS versions prior to 19.2R3-S3 Juniper Networks Junos OS versions prior to 19.3R2-S6 Juniper Networks Junos OS versions prior to 19.3R3-S3 Juniper Networks Junos OS versions prior to 19.4R3-S6 Juniper Networks Junos OS versions prior to 20.1R2-S2 Juniper Networks Junos OS versions prior to 20.1R3-S1 Juniper Networks Junos OS versions prior to 20.2R3-S2 Juniper Networks Junos OS versions prior to 20.3R3 Juniper Networks Junos OS versions prior to 20.4R2-S1 Juniper Networks Junos OS versions prior to 20.4R3 Juniper Networks Junos OS versions prior to 21.1R1-S1 Juniper Networks Junos OS versions prior to 21.1R2 Juniper Networks Junos OS Evolved versions prior to 20.4R2-S3-EVO Juniper Networks Junos OS Evolved versions prior to 21.1-EVO
Description An improper privilege management issue in the command-line interpreter (CLI) of Juniper Networks Junos OS and Junos OS Evolved allows a low-privileged user to overwrite local files as root. This could lead to system integrity issues or Denial of Service (DoS), requiring manual intervention to recover. The issue only affects systems where jdhcpd is running, which can be confirmed via the 'show system processes' command.
Recommendations For Juniper Networks Junos OS versions prior to 15.1R7-S10, update to 15.1R7-S10 or later. For Juniper Networks Junos OS versions prior to 17.4R3-S5, update to 17.4R3-S5 or later. For Juniper Networks Junos OS versions prior to 18.3R3-S5, update to 18.3R3-S5 or later. For Juniper Networks Junos OS versions prior to 18.4R3-S9, update to 18.4R3-S9 or later. For Juniper Networks Junos OS versions prior to 19.1R3-S6, update to 19.1R3-S6 or later. For Juniper Networks Junos OS versions prior to 19.2R1-S7, update to 19.2R1-S7 or later. For Juniper Networks Junos OS versions prior to 19.2R3-S3, update to 19.2R3-S3 or later. For Juniper Networks Junos OS versions prior to 19.3R2-S6, update to 19.3R2-S6 or later. For Juniper Networks Junos OS versions prior to 19.3R3-S3, update to 19.3R3-S3 or later. For Juniper Networks Junos OS versions prior to 19.4R3-S6, update to 19.4R3-S6 or later. For Juniper Networks Junos OS versions prior to 20.1R2-S2, update to 20.1R2-S2 or later. For Juniper Networks Junos OS versions prior to 20.1R3-S1, update to 20.1R3-S1 or later. For Juniper Networks Junos OS versions prior to 20.2R3-S2, update to 20.2R3-S2 or later. For Juniper Networks Junos OS versions prior to 20.3R3, update to 20.3R3 or later. For Juniper Networks Junos OS versions prior to 20.4R2-S1, update to 20.4R2-S1 or later. For Juniper Networks Junos OS versions prior to 20.4R3, update to 20.4R3 or later. For Juniper Networks Junos OS versions prior to 21.1R1-S1, update to 21.1R1-S1 or later. For Juniper Networks Junos OS versions prior to 21.1R2, update to 21.1R2 or later. For Juniper Networks Junos OS Evolved versions prior to 20.4R2-S3-EVO, update to 20.4R2-S3-EVO or later. For Juniper Networks Junos OS Evolved versions prior to 21.1-EVO, update to 21.1-EVO or later.

Fix

DoS

Improper Privilege Management

RCE

Weakness Enumeration

CWE-269CWE-20

Related Identifiers

CVE-2021-31360

Affected Products

Junos
Junos Evolved