CVE-2021-31377 — Incorrect Permission Assignment in Networks Junos OS

CWE-732 — Incorrect Permission Assignment4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 90.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Juniper Networks Junos OSJuniper Junos
Timeline
PublishedOct 19
Latest updateMay 24

Description

An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated attacker to cause routing process daemon (RPD) to crash and restart, causing a Denial of Service (DoS). Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R2-S13, 17.4R…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5juniper_networks/junos_os15.1 — 15.1R7-S9+14
▶NVDjuniper/junos15 versions+14

🔴Vulnerability Details

2
GHSA
GHSA-539c-wv27-33m6: An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated at↗2022-05-24
▶
CVEList
Junos OS: A local authenticated attacker can cause RPD to core↗2021-10-19
▶

📋Vendor Advisories

1
Juniper
CVE-2021-31377: An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated at↗2021-10-19
▶
CVE-2021-31377 — Incorrect Permission Assignment | cvebase