PT-2021-2120 · Juniper Networks · Junos

Published 2021-01-13 · Updated 2021-02-05 · CVE-2021-0219

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.3R3-S10 Juniper Networks Junos OS version 17.4 prior to 17.4R2-S12, 17.4R3-S3 Juniper Networks Junos OS version 18.1 prior to 18.1R3-S11 Juniper Networks Junos OS version 18.2 prior to 18.2R2-S8, 18.2R3-S6 Juniper Networks Junos OS version 18.3 prior to 18.3R3-S4 Juniper Networks Junos OS version 18.4 prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S6 Juniper Networks Junos OS version 19.1 prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3 Juniper Networks Junos OS version 19.2 prior to 19.2R3-S1 Juniper Networks Junos OS version 19.3 prior to 19.3R2-S5, 19.3R3-S1 Juniper Networks Junos OS version 19.4 prior to 19.4R2-S2, 19.4R3-S1 Juniper Networks Junos OS version 20.1 prior to 20.1R2 Juniper Networks Junos OS version 20.2 prior to 20.2R1-S2, 20.2R2 Juniper Networks Junos OS version 20.3 prior to 20.3R1-S1, 20.3R2

Description A command injection vulnerability in the install package validation subsystem of Juniper Networks Junos OS may allow a locally authenticated attacker with privileges to execute commands with root privilege. The vulnerability can be exploited by executing the command "request system software add validate-on-host" via the CLI. This issue is related to the lack of measures to neutralize special elements used in operating system commands.

Recommendations For Juniper Networks Junos OS versions prior to 17.3R3-S10, update to version 17.3R3-S10 or later. For Juniper Networks Junos OS version 17.4, update to version 17.4R2-S12, 17.4R3-S3 or later. For Juniper Networks Junos OS version 18.1, update to version 18.1R3-S11 or later. For Juniper Networks Junos OS version 18.2, update to version 18.2R2-S8, 18.2R3-S6 or later. For Juniper Networks Junos OS version 18.3, update to version 18.3R3-S4 or later. For Juniper Networks Junos OS version 18.4, update to version 18.4R1-S8, 18.4R2-S7, 18.4R3-S6 or later. For Juniper Networks Junos OS version 19.1, update to version 19.1R1-S6, 19.1R2-S2, 19.1R3-S3 or later. For Juniper Networks Junos OS version 19.2, update to version 19.2R3-S1 or later. For Juniper Networks Junos OS version 19.3, update to version 19.3R2-S5, 19.3R3-S1 or later. For Juniper Networks Junos OS version 19.4, update to version 19.4R2-S2, 19.4R3-S1 or later. For Juniper Networks Junos OS version 20.1, update to version 20.1R2 or later. For Juniper Networks Junos OS version 20.2, update to version 20.2R1-S2, 20.2R2 or later. For Juniper Networks Junos OS version 20.3, update to version 20.3R1-S1, 20.3R2 or later. As a temporary workaround, consider restricting access to the "request system software add validate-on-host" command until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2021-00976

CVE-2021-0219

Affected Products

Junos

References · 6

• https://kb.juniper.net/JSA11109 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0219 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00976 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-0219 · Security Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11109&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11109&cat=SIRT_1&actp=LIST · Note