PT-2021-3644 · Juniper Networks · Junos Evolved

Published 2021-07-14 · Updated 2021-10-25 · CVE-2021-0286

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 20.4R2-EVO Juniper Networks Junos OS Evolved 21.1 versions prior to 21.1R2-EVO

Description The issue is related to the handling of exceptional conditions in the Advanced Forwarding Toolkit manager process, allowing an attacker to send specially crafted packets to the device, causing it to crash and restart. This results in a Denial of Service (DoS) condition, impacting all traffic going through the FPC. Prior to the crash, specific error messages will be logged, including messages related to failed nexthop operations.

Recommendations For Juniper Networks Junos OS Evolved versions prior to 20.4R2-EVO, update to version 20.4R2-EVO or later. For Juniper Networks Junos OS Evolved 21.1 versions prior to 21.1R2-EVO, update to version 21.1R2-EVO or later. As a temporary workaround, consider restricting access to the vulnerable Advanced Forwarding Toolkit manager process to minimize the risk of exploitation.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-703

CWE-754

Related Identifiers

BDU:2021-03863

CVE-2021-0286

Affected Products

Junos Evolved

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-0286 · Security Note
• https://osv.dev/vulnerability/CVE-2021-0286 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03863 · Security Note
• https://kb.juniper.net/JSA11188 · Vendor Advisory
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11188&actp=METADATA · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11188&actp=METADATA · Note
• https://t.me/cvenotify/18259 · Telegram Post