Log in Start free

Vulnerability · Published Oct 19, 2021 · Assigned by juniper

CVE-2021-31375Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed

High 7.2

In plain English

A high-severity improper input validation in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.8%top 43.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed. This, in turn, may allow a spoofed advertisement to be accepted or propagated. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R2.

Affected products (as reported)

VendorProductVersions
Juniper Networks Junos OS 12.3 – before 12.3R12-S1815.1 – before 15.1R7-S917.2 – before 17.2R3-S317.3 – before 17.3R3-S717.4 – before 17.4R2-S9, 17.4R318.1 – before 18.1R3-S1318.2 – before 18.2R3-S318.3 – before 18.3R3-S1

Weakness: CWE-358, CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

References