What is CVE-2021-31356?

CVE-2021-31356 is a high-severity vulnerability in Juniper Junos_os_evolved, classified under Command Injection. CVSS score: 7.8/10. Published 2021-10-19.

How severe is CVE-2021-31356?

High severity. CVSS v3 base score is 7.8 out of 10.

RCE in Juniper Junos_os_evolved

CVE-2021-31356

A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.009 (54.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Juniper Junos_os_evolved — versions 20.4, 21.1, 21.2
Juniper Networks Junos Os Evolved — versions unspecified, 21.1R1-EVO, 21.2R1-EVO

Weakness classification (CWE)

References

sirt@juniper.net (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-31356?: CVE-2021-31356 is a high-severity vulnerability in Juniper Junos_os_evolved, classified under Command Injection. CVSS score: 7.8/10. Published 2021-10-19.
How severe is CVE-2021-31356?: High severity. CVSS v3 base score is 7.8 out of 10.