Log in Start free

Vulnerability · Published Jan 15, 2021 · Assigned by juniper

CVE-2021-0210Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session

Medium 6.8

In plain English

A medium-severity information exposure in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)1.1%top 33.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S17; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3, 19.2R3-S1; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2.

Affected products (as reported)

VendorProductVersions
Juniper Networks Junos OS 12.3 – before 12.3R12-S1717.3 – before 17.3R3-S1017.4 – before 17.4R2-S12, 17.4R3-S318.1 – before 18.1R3-S1118.2 – before 18.2R3-S618.3 – before 18.3R2-S4, 18.3R3-S418.4 – before 18.4R2-S5, 18.4R3-S519.1 – before 19.1R1-S6, 19.1R2-S2, 19.1R3-S3

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

References