← Back

CVE-2021-31372

nvd nist
Published: Oct 19, 2021Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: sirt@juniper.net (Secondary)

Description

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. This issue affects: Juniper Networks Junos OS All versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R3-S3; 19.3 versions prior to 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2;

Affected (132)

Products: Juniper: Junos
1 product
Junos
Configuration A
132 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Up to 18.2
Version 18.3
Version 18.3 r1-s1
Version 18.3 r1-s2
Version 18.3 r1-s3
Version 18.3 r1-s4
Version 18.3 r1-s5
Version 18.3 r1-s6
Version 18.3 r1
Version 18.3 r2-s1
Version 18.3 r2-s2
Version 18.3 r2-s3
Version 18.3 r2-s4
Version 18.3 r2
Version 18.3 r3-s1
Version 18.3 r3-s2
Version 18.3 r3-s3
Version 18.3 r3-s4
Version 18.3 r3
Version 18.4
Version 18.4 r1-s1
Version 18.4 r1-s2
Version 18.4 r1-s3
Version 18.4 r1-s4
Version 18.4 r1-s5
Version 18.4 r1-s6
Version 18.4 r1-s7
Version 18.4 r1
Version 18.4 r2-s1
Version 18.4 r2-s2
Version 18.4 r2-s3
Version 18.4 r2-s4
Version 18.4 r2-s5
Version 18.4 r2-s6
Version 18.4 r2-s7
Version 18.4 r2-s8
Version 18.4 r2
Version 18.4 r3-s1
Version 18.4 r3-s2
Version 18.4 r3-s3
Version 18.4 r3-s4
Version 18.4 r3-s5
Version 18.4 r3-s6
Version 18.4 r3-s7
Version 18.4 r3-s8
Version 18.4 r3
Version 19.1
Version 19.1 r1-s1
Version 19.1 r1-s2
Version 19.1 r1-s3
Version 19.1 r1-s4
Version 19.1 r1-s5
Version 19.1 r1-s6
Version 19.1 r1
Version 19.1 r2-s1
Version 19.1 r2-s2
Version 19.1 r2
Version 19.1 r3-s1
Version 19.1 r3-s2
Version 19.1 r3-s3
Version 19.1 r3-s4
Version 19.1 r3-s5
Version 19.1 r3
Version 19.2
Version 19.2 r1-s1
Version 19.2 r1-s2
Version 19.2 r1-s3
Version 19.2 r1-s4
Version 19.2 r1-s5
Version 19.2 r1-s6
Version 19.2 r1
Version 19.2 r2-s1
Version 19.2 r2
Version 19.2 r3-s1
Version 19.2 r3-s2
Version 19.2 r3
Version 19.3
Version 19.3 r1-s1
Version 19.3 r1
Version 19.3 r2-s1
Version 19.3 r2-s2
Version 19.3 r2-s3
Version 19.3 r2-s4
Version 19.3 r2-s5
Version 19.3 r2
Version 19.3 r3-s1
Version 19.3 r3-s2
Version 19.3 r3
Version 19.4 r1-s1
Version 19.4 r1-s2
Version 19.4 r1-s3
Version 19.4 r1
Version 19.4 r2-s1
Version 19.4 r2-s2
Version 19.4 r2-s3
Version 19.4 r2
Version 19.4 r3-s1
Version 19.4 r3-s2
Version 19.4 r3-s3
Version 19.4 r3-s4
Version 19.4 r3
Version 20.1 r1-s1
Version 20.1 r1-s2
Version 20.1 r1-s3
Version 20.1 r1-s4
Version 20.1 r1
Version 20.1 r2-s1
Version 20.1 r2-s2
Version 20.1 r2
Version 20.1 r3
Version 20.2 r1-s1
Version 20.2 r1-s2
Version 20.2 r1-s3
Version 20.2 r1
Version 20.2 r2-s1
Version 20.2 r2-s2
Version 20.2 r2-s3
Version 20.2 r2
Version 20.2 r3-s1
Version 20.2 r3
Version 20.3 r1-s1
Version 20.3 r1
Version 20.3 r2-s1
Version 20.3 r2
Version 20.3 r3
Version 20.4 r1-s1
Version 20.4 r1
Version 20.4 r2-s1
Version 20.4 r2
Version 21.1 r1-s1
Version 21.1 r1
Version 21.2 r1

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.