CVE-2021-0207 NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

🗓️ 15 Jan 2021 17:35:54Reported by juniperType

Certain genuine traffic may be discarded by Junos OS, causing Denial of Service (DoS) to clients. The issue affects specific Juniper Networks Junos OS devices and versions

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of Junos operating system routers models NFX250, QFX5K, EX2300, EX3400, EX4300 Multigigabit, and EX4600 is related to the occurrence of interpretation conflicts, which allows attackers to cause service failures.	25 Feb 202100:00	–	bdu_fstec
CNNVD	Juniper Networks Junos OS Security Vulnerability	13 Jan 202100:00	–	cnnvd
CVE	CVE-2021-0207	15 Jan 202117:35	–	cve
EUVD	EUVD-2021-2826	3 Oct 202520:07	–	euvd
Tenable Nessus	Juniper Junos OS DoS (JSA11097)	29 Jan 202100:00	–	nessus
NCSC	Vulnerabilities fixed in Juniper Junos OS	14 Jan 202100:00	–	ncsc
NVD	CVE-2021-0207	15 Jan 202118:15	–	nvd
OSV	CVE-2021-0207	15 Jan 202118:15	–	osv
Prion	Input validation	15 Jan 202118:15	–	prion

[
  {
    "platforms": [
      "NFX250, QFX5K Series, EX4600"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "17.3R3-S7",
        "status": "affected",
        "version": "17.3",
        "versionType": "custom"
      },
      {
        "lessThan": "17.4R2-S11, 17.4R3-S3",
        "status": "affected",
        "version": "17.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4600"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "18.1R3-S9",
        "status": "affected",
        "version": "18.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "18.2R3-S3",
        "status": "affected",
        "version": "18.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "18.3R3-S1",
        "status": "affected",
        "version": "18.3",
        "versionType": "custom"
      },
      {
        "lessThan": "18.4R1-S5, 18.4R2-S3, 18.4R3",
        "status": "affected",
        "version": "18.4",
        "versionType": "custom"
      },
      {
        "lessThan": "19.1R1-S5, 19.1R2-S1, 19.1R3",
        "status": "affected",
        "version": "19.1",
        "versionType": "custom"
      },
      {
        "lessThan": "19.2R1-S5, 19.2R2",
        "status": "affected",
        "version": "19.2",
        "versionType": "custom"
      },
      {
        "lessThan": "19.3R2-S3, 19.3R3",
        "status": "affected",
        "version": "19.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "19.4R1-S2, 19.4R2",
        "status": "affected",
        "version": "19.4",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.juniper.net/JSA11097

15 Jan 2021 17:35Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5

EPSS0.00389

junos os denial of service juniper networks ipv4 ipv6 dos nfx250 nfx350 qfx5k series ex2300 series ex3400 series ex4300 multigigabit ex4600 series cve-2021-0207