Vulnerability · Published Jul 15, 2021 · Assigned by juniper

CVE-2021-0276Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.

Critical 9.8

In plain English

A critical-severity stack buffer overflow in SBR Carrier from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)2.3%top 16.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service (DoS) or leading to remote code execution (RCE). By continuously sending this specific packets, an attacker can repeatedly crash the radius daemon, causing a sustained Denial of Service (DoS). This issue affects Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R19; 8.5.0 versions prior to 8.5.0R10; 8.6.0 versions prior to 8.6.0R4.

Affected products (as reported)

Vendor	Product	Versions
Juniper Networks	SBR Carrier	8.4.1 – before 8.4.1R198.5.0 – before 8.5.0R108.6.0 – before 8.6.0R4

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://kb.juniper.net/JSA11180 x_refsource_CONFIRM