CVE-2021-0297: juniper junos os evolved

csirt@kutim:~/threat-intel/cve/CVE-2021-0297

CVSS 6.5 · Medium EPSS 0,73%

Kerentanan Improper Handling of Exceptional Conditions pada juniper junos os evolved. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being established, resulting in an impact on confidentiality or stability of the network. This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.3R2-S1-EVO; 20.4 versions prior to 20.4R2-EVO; 21.1 versions prior to 21.1R2-EVO. Juniper Networks Junos OS is not affected by this issue.

Rincian

Terbit di NVD: 19 Oktober 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-755: Improper Handling of Exceptional Conditions
EPSS (30 hari): 0,73% peluang dieksploitasi; lebih tinggi dari 53,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
juniper	junos os evolved	Versi 20.3 r1
juniper	junos os evolved	Versi 20.3 r1-s1
juniper	junos os evolved	Versi 20.3 r2
juniper	junos os evolved	Versi 20.4 r1
juniper	junos os evolved	Versi 21.1 r1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://kb.juniper.net/JSA11211 advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.