cbcvebase.
CVE-2021-0238
published 2021-04-22

CVE-2021-0238: When a MX Series is configured as a Broadband Network Gateway (BNG) based on Layer 2 Tunneling Protocol (L2TP), executing certain CLI command may cause the…

PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
14.2th percentile
When a MX Series is configured as a Broadband Network Gateway (BNG) based on Layer 2 Tunneling Protocol (L2TP), executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monitor the available disk space: user@device> show system storage Filesystem Size Used Avail Capacity Mounted on /dev/gpt/junos 19G 18G 147M 99% /.mount <<<<< running out of space tmpfs 21G 16K 21G 0% /.mount/tmp tmpfs 5.3G 1.7M 5.3G 0% /.mount/mfs This issue affects Juniper Networks Junos OS on MX Series: 17.3R1 and later versions prior to 17.4R3-S5, 18.1 versions prior to 18.1R3-S13, 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S7; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S2; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R2-S3, 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R1-S1, 20.4R2; This issue does not affect Juniper Networks Junos OS versions prior to 17.3R1.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos_os
juniperjunos_space
junipermx_series
juniper_networksjunos_os>= 17.3R1 < 17.3*17.3*
juniper_networksjunos_os>= 17.4 < 17.4R3-S517.4R3-S5
juniper_networksjunos_os>= 18.1 < 18.1R3-S1318.1R3-S13
juniper_networksjunos_os>= 18.2 < 18.2R3-S718.2R3-S7
juniper_networksjunos_os>= 18.3 < 18.3R3-S418.3R3-S4
juniper_networksjunos_os>= 18.4 < 18.4R3-S718.4R3-S7
juniper_networksjunos_os>= 19.1 < 19.1R3-S419.1R3-S4
juniper_networksjunos_os>= 19.2 < 19.2R1-S6, 19.2R3-S219.2R1-S6, 19.2R3-S2
juniper_networksjunos_os>= 19.3 < 19.3R3-S219.3R3-S2
juniper_networksjunos_os>= 19.4 < 19.4R2-S4, 19.4R3-S219.4R2-S4, 19.4R3-S2

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.