CVE-2021-31349

🗓️ 19 Oct 2021 18:16:28Reported by juniperType

An internal HTTP header leads to authentication bypass vulnerability, allowing unauthorized access & code execution

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-31349	19 Oct 202122:33	–	circl
CNNVD	128 Technology Session Smart Router 授权问题漏洞	18 Oct 202100:00	–	cnnvd
Cvelist	CVE-2021-31349 Session Smart Router: Authentication Bypass Vulnerability	19 Oct 202118:16	–	cvelist
EUVD	EUVD-2021-18259	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#85073657: 128 Technology Session Smart Router vulnerable to authentication bypass	18 Oct 202100:00	–	jvn
Japan Vulnerability Notes	128 Technology Session Smart Router vulnerable to authentication bypass	18 Oct 202105:58	–	jvn
NVD	CVE-2021-31349	19 Oct 202119:15	–	nvd
OSV	CVE-2021-31349	19 Oct 202119:15	–	osv
Prion	Authentication flaw	19 Oct 202119:15	–	prion
Positive Technologies	PT-2021-5074 · Juniper Networks · 128 Technology Session Smart Router	13 Oct 202100:00	–	ptsecurity

NVD

Vulners

Node

juniper 128_technology_session_smart_router_firmwareRange<4.5.11

juniper 128_technology_session_smart_router_firmwareRange5.0.0–5.0.1

AND

juniper 128_technology_session_smart_routerMatch-

[
  {
    "product": "128 Technology Session Smart Router",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "4.5.11",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "5.0.1",
        "status": "affected",
        "version": "5.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.juniper.net/JSA11256

21 Nov 2024 06:05Current

9.9High risk

Vulners AI Score9.9

CVSS 27.5

CVSS 3.19.8

EPSS0.00752

CWE-287