CVE-2021-0207 NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

🗓️ 15 Jan 2021 17:35:54Reported by juniperType

Certain genuine traffic may be discarded by Junos OS, causing Denial of Service (DoS) to clients. The issue affects specific Juniper Networks Junos OS devices and versions

Reporter	Title	Published	Views	Family All 12
attackerkb	CVE-2021-0207	13 Jan 202117:00	–	attackerkb
BDU FSTEC	Junos OS Interpretation Conflict DoS	25 Feb 202100:00	–	bdu_fstec
CNNVD	Juniper Networks Junos OS Security Vulnerability	13 Jan 202100:00	–	cnnvd
CVE	CVE-2021-0207	15 Jan 202117:35	–	cve
EUVD	EUVD-2021-2826	3 Oct 202520:07	–	euvd
Tenable Nessus	Juniper Junos OS DoS (JSA11097)	29 Jan 202100:00	–	nessus
NCSC	Vulnerabilities fixed in Juniper Junos OS	14 Jan 202100:00	–	ncsc
NVD	CVE-2021-0207	15 Jan 202118:15	–	nvd
osv_cve	CVE-2021-0207	15 Jan 202118:15	–	osv_cve
Prion	Input validation	15 Jan 202118:15	–	prion

[
  {
    "platforms": [
      "NFX250, QFX5K Series, EX4600"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "17.3R3-S7",
        "status": "affected",
        "version": "17.3",
        "versionType": "custom"
      },
      {
        "lessThan": "17.4R2-S11, 17.4R3-S3",
        "status": "affected",
        "version": "17.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4600"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "18.1R3-S9",
        "status": "affected",
        "version": "18.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "18.2R3-S3",
        "status": "affected",
        "version": "18.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "18.3R3-S1",
        "status": "affected",
        "version": "18.3",
        "versionType": "custom"
      },
      {
        "lessThan": "18.4R1-S5, 18.4R2-S3, 18.4R3",
        "status": "affected",
        "version": "18.4",
        "versionType": "custom"
      },
      {
        "lessThan": "19.1R1-S5, 19.1R2-S1, 19.1R3",
        "status": "affected",
        "version": "19.1",
        "versionType": "custom"
      },
      {
        "lessThan": "19.2R1-S5, 19.2R2",
        "status": "affected",
        "version": "19.2",
        "versionType": "custom"
      },
      {
        "lessThan": "19.3R2-S3, 19.3R3",
        "status": "affected",
        "version": "19.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "19.4R1-S2, 19.4R2",
        "status": "affected",
        "version": "19.4",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.juniper.net/JSA11097

15 Jan 2021 17:35Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5

EPSS0.01276

junos os denial of service juniper networks ipv4 ipv6 dos nfx250 nfx350 qfx5k series ex2300 series ex3400 series ex4300 multigigabit ex4600 series cve-2021-0207