PT-2021-3702 · Juniper Networks · Junos

Published 2021-07-14 · Updated 2021-07-28 · CVE-2021-0294

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS version 18.4R2-S5

Description A vulnerability in Juniper Networks Junos OS affects the release 18.4R2-S5 on QFX5000 Series and EX4600 Series. The issue is related to an inconsistently implemented function, which can lead to the enhanced storm control filter group not being installed if storm-control enhanced is configured. This allows an attacker to cause high CPU usage or packet loss issues by sending a large amount of broadcast or unknown unicast packets to the device. The affected devices include QFX5100, QFX5110, QFX5120, QFX5200, QFX5210, EX4600, and EX4650, as well as QFX5100 with QFX 5e Series image installed.

Recommendations For Juniper Networks Junos OS version 18.4R2-S5, consider disabling the storm-control enhanced configuration as a temporary workaround until a patch is available. Restrict access to the affected devices to minimize the risk of exploitation. Avoid using the storm-control enhanced feature in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-474

CWE-254

Related Identifiers

BDU:2021-03939

CVE-2021-0294

Affected Products

Junos

References · 8

• https://kb.juniper.net/JSA11196 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0294 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03939 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-0294 · Security Note
• https://cybersecurity-help.cz/vdb/SB2021071510 · Note
• https://t.me/cvenotify/17711 · Telegram Post
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11196 · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11196 · Note