CVE-2021-0249

Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.

State: Published
Severity: 8.1 High
Published: Apr 22, 2021
Updated: Sep 16, 2024
Reserved: Oct 27, 2020

Read the record on cve.org

Description

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to or through the device. This issue affects: Juniper Networks Junos OS on SRX Series: 15.1X49 versions prior to 15.1X49-D190; 17.4 versions prior to 17.4R2-S9; 17.4R3 and later versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3-S1; 18.3 versions prior to 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2. An indicator of compromise can be the following text in the UTM log: RT_UTM: AV_FILE_NOT_SCANNED_PASSED_MT:

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	juniper

Weaknesses

CWE-120 Buffer Overflow

Affected Products

Product	Versions
Junos OSJuniper Networks	15.1X49 to before 15.1X49-D190Affected 17.4 to before 17.4R2-S9Affectedfrom 17.4R3Affected 18.1 to before 18.1R3-S9Affected 18.2 to before 18.2R3-S1Affected 18.3 to before 18.3R2-S3, 18.3R3Affected 18.4 to before 18.4R2-S3, 18.4R3Affected 19.1 to before 19.1R1-S4, 19.1R2Affected 19.2 to before 19.2R1-S1, 19.2R2Affected

References

https://kb.juniper.net/JSA11142

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.