CVE-2021-0294

A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configured, can lead to the enhanced storm control filter group not be installed. It will cause storm control not to work hence allowing an attacker to cause high CPU usage or packet loss issues by sending a large amount of broadcast or unknown unicast packets arriving the device. This issue affects Juniper Networks QFX5100, QFX5110, QFX5120, QFX5200, QFX5210, EX4600, and EX4650, and QFX5100 with QFX 5e Series image installed. QFX5130 and QFX5220 are not affected from this issue. This issue affects Juniper Networks Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series. No other product or platform is affected by this vulnerability.
References
Link Resource
https://kb.juniper.net/JSA11196 Vendor Advisory
https://kb.juniper.net/JSA11196 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*
OR cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:42

Type Values Removed Values Added
References () https://kb.juniper.net/JSA11196 - Vendor Advisory () https://kb.juniper.net/JSA11196 - Vendor Advisory

Information

Published : 2021-07-15 20:15

Updated : 2024-11-21 05:42


NVD link : CVE-2021-0294

Mitre link : CVE-2021-0294

CVE.ORG link : CVE-2021-0294


JSON object : View

Products Affected

juniper

  • qfx5210
  • qfx5120
  • ex4650
  • qfx5200
  • ex4600
  • junos
  • qfx5110
  • qfx5100
CWE
CWE-474

Use of Function with Inconsistent Implementations

NVD-CWE-Other