PT-2021-19273 · Juniper Networks · Junos

Published 2021-10-19 · Updated 2022-10-27 · CVE-2021-31375

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3R12-S18 Juniper Networks Junos OS versions prior to 15.1R7-S9 Juniper Networks Junos OS versions prior to 17.2R3-S3 Juniper Networks Junos OS versions prior to 17.3R3-S7 Juniper Networks Junos OS versions prior to 17.4R2-S9, 17.4R3 Juniper Networks Junos OS versions prior to 18.1R3-S13 Juniper Networks Junos OS versions prior to 18.2R3-S3 Juniper Networks Junos OS versions prior to 18.3R3-S1 Juniper Networks Junos OS versions prior to 18.4R3 Juniper Networks Junos OS versions prior to 19.1R2 Juniper Networks Junos OS versions prior to 19.2R2 Juniper Networks Junos OS versions prior to 19.3R2

Description An Improper Input Validation issue in the routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI) allows an attacker to send a specific BGP update, potentially causing RPKI policy-checks to be bypassed. This may allow a spoofed advertisement to be accepted or propagated.

Recommendations For Juniper Networks Junos OS versions prior to 12.3R12-S18, update to 12.3R12-S18 or later. For Juniper Networks Junos OS versions prior to 15.1R7-S9, update to 15.1R7-S9 or later. For Juniper Networks Junos OS versions prior to 17.2R3-S3, update to 17.2R3-S3 or later. For Juniper Networks Junos OS versions prior to 17.3R3-S7, update to 17.3R3-S7 or later. For Juniper Networks Junos OS versions prior to 17.4R2-S9, 17.4R3, update to 17.4R2-S9 or 17.4R3 or later. For Juniper Networks Junos OS versions prior to 18.1R3-S13, update to 18.1R3-S13 or later. For Juniper Networks Junos OS versions prior to 18.2R3-S3, update to 18.2R3-S3 or later. For Juniper Networks Junos OS versions prior to 18.3R3-S1, update to 18.3R3-S1 or later. For Juniper Networks Junos OS versions prior to 18.4R3, update to 18.4R3 or later. For Juniper Networks Junos OS versions prior to 19.1R2, update to 19.1R2 or later. For Juniper Networks Junos OS versions prior to 19.2R2, update to 19.2R2 or later. For Juniper Networks Junos OS versions prior to 19.3R2, update to 19.3R2 or later.

Fix

Improperly Implemented Security Check for Standard

RCE

Weakness Enumeration

CWE-358

CWE-20

Related Identifiers

CVE-2021-31375

Affected Products

Junos

References · 4

• https://osv.dev/vulnerability/CVE-2021-31375 · Vendor Advisory
• https://kb.juniper.net/JSA11240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31375 · Security Note
• https://t.me/cibsecurity/30825 · Telegram Post