What is CVE-2021-31375?

CVE-2021-31375 is a high-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 7.2/10. Published 2021-10-19.

How severe is CVE-2021-31375?

High severity. CVSS v3 base score is 7.2 out of 10.

Improper input validation in Juniper Junos

CVE-2021-31375

An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed. This, in turn, may allow a spoofed advertisement to be accepted or propagated. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R2.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.008 (52.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L.

Affected products

Juniper Junos — versions 12.3, 15.1, 17.2
Juniper Networks Junos Os — versions 12.3, 15.1, 17.2

Weakness classification (CWE)

References

sirt@juniper.net (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-31375?: CVE-2021-31375 is a high-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 7.2/10. Published 2021-10-19.
How severe is CVE-2021-31375?: High severity. CVSS v3 base score is 7.2 out of 10.