csirt@kutim:~/threat-intel/cve/CVE-2021-0291

Katalog CVE

CVSS 6.5 · Medium EPSS 1,0%

Kerentanan Exposure of Sensitive System Information to an Unauthorized Control Sphere pada juniper junos. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of specific traffic may lead to a partial Denial of Service (DoS) as the CPU utilization of the RE is significantly increased. The SNMP Agent Extensibility (agentx) process should only be listening to TCP port 705 on the internal routing instance. External connections destined to port 705 should not be allowed. This issue affects: Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R2-S13, 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S8; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R2. Juniper Networks Junos OS Evolved versions prior to 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 13.2R1.

Rincian

Terbit di NVD
15 Juli 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
EPSS (30 hari)
1,0% peluang dieksploitasi; lebih tinggi dari 62,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper junos Versi 15.1
juniper junos Versi 15.1 a1
juniper junos Versi 15.1 f
juniper junos Versi 15.1 f1
juniper junos Versi 15.1 f2
juniper junos Versi 15.1 f2-s1
juniper junos Versi 15.1 f2-s2
juniper junos Versi 15.1 f2-s3
juniper junos Versi 15.1 f2-s4
juniper junos Versi 15.1 f3
juniper junos Versi 15.1 f4
juniper junos Versi 15.1 f5
juniper junos Versi 15.1 f5-s7
juniper junos Versi 15.1 f6
juniper junos Versi 15.1 f6-s1
juniper junos Versi 15.1 f6-s10
juniper junos Versi 15.1 f6-s12
juniper junos Versi 15.1 f6-s2
juniper junos Versi 15.1 f6-s3
juniper junos Versi 15.1 f6-s4
juniper junos Versi 15.1 f6-s5
juniper junos Versi 15.1 f6-s6
juniper junos Versi 15.1 f6-s7
juniper junos Versi 15.1 f6-s8
juniper junos Versi 15.1 f6-s9
juniper junos Versi 15.1 f7
juniper junos Versi 15.1 r
juniper junos Versi 15.1 r1
juniper junos Versi 15.1 r2
juniper junos Versi 15.1 r3
juniper junos Versi 15.1 r4
juniper junos Versi 15.1 r4-s7
juniper junos Versi 15.1 r4-s8
juniper junos Versi 15.1 r4-s9
juniper junos Versi 15.1 r5
juniper junos Versi 15.1 r5-s1
juniper junos Versi 15.1 r5-s3
juniper junos Versi 15.1 r5-s5
juniper junos Versi 15.1 r5-s6
juniper junos Versi 15.1 r6
juniper junos Versi 15.1 r6-s1
juniper junos Versi 15.1 r6-s2
juniper junos Versi 15.1 r6-s3
juniper junos Versi 15.1 r6-s4
juniper junos Versi 15.1 r6-s6
juniper junos Versi 15.1 r7
juniper junos Versi 15.1 r7-s1
juniper junos Versi 15.1 r7-s2
juniper junos Versi 15.1 r7-s3
juniper junos Versi 15.1 r7-s4
juniper junos Versi 15.1 r7-s5
juniper junos Versi 15.1 r7-s6
juniper junos Versi 15.1 r7-s7
juniper junos Versi 15.1 r7-s8
juniper junos Versi 17.3
juniper junos Versi 17.3 r1
juniper junos Versi 17.3 r1-s1
juniper junos Versi 17.3 r1-s4
juniper junos Versi 17.3 r2
juniper junos Versi 17.3 r2-s1

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 218 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.