Vulnerability in Juniper Ex4600
CVE-2021-0294
A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configured, can lead to the enhanced storm control filter group not be installed. It will cause storm control not to work hence allowing an attacker to cause high CPU usage or packet loss issues by sending a large amount of broadcast or unknown unicast packets arriving the device. This issue affects Juniper Networks QFX5100, QFX5110, QFX5120, QFX5200, QFX5210, EX4600, and EX4650, and QFX5100 with QFX 5e Series image installed. QFX5130 and QFX5220 are not affected from this issue. This issue affects Juniper Networks Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series. No other product or platform is affected by this vulnerability.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
EPSS exploit prediction
EPSS: 0.009 (60.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 60th percentile — 60.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000
Affected products
- Juniper Ex4600
- Juniper Ex4650
- Juniper Junos — versions 18.4
- Juniper Qfx5100
- Juniper Qfx5110
- Juniper Qfx5120
- Juniper Qfx5200
- Juniper Qfx5210
- Juniper Networks Junos OS — versions 18.4R2-S5
Weakness classification (CWE)
References
- kb.juniper.net/JSA11196 (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-0294?
- CVE-2021-0294 is a medium-severity vulnerability in Juniper Ex4600, classified under CWE-474. CVSS score: 5.3/10. Published 2021-07-15.
- How severe is CVE-2021-0294?
- Medium severity. CVSS v3 base score is 5.3 out of 10.