CVE-2021-31350

Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)

Severity Score

8.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit (JET) API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the targeted system. The issue is caused by the JET service daemon (jsd) process authenticating the user, then passing configuration operations directly to the management daemon (mgd) process, which runs as root. This issue affects Juniper Networks Junos OS: 18.4 versions prior to 18.4R1-S8, 18.4R2-S8, 18.4R3-S8; 19.1 versions prior to 19.1R2-S3, 19.1R3-S5; 19.2 versions prior to 19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R2-S3, 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2. This issue does not affect Juniper Networks Junos OS versions prior to 18.4R1. Juniper Networks Junos OS Evolved: All versions prior to 20.4R2-EVO; 21.1-EVO versions prior to 21.1R2-EVO.

Una vulnerabilidad de administración de privilegios inapropiada en el marco gRPC, usado por la API de Juniper Extension Toolkit (JET) en Juniper Networks Junos OS y Junos OS Evolved, permite a un atacante autenticado poco privilegiado basado en la red llevar a cabo operaciones como root, conllevando a un compromiso completo del sistema objetivo. El problema está causado por el proceso del demonio de servicio JET (jsd) autenticando al usuario y luego pasa las operaciones de configuración directamente al proceso del demonio de administración (mgd), que se ejecuta como root. Este problema afecta a Juniper Networks Junos OS versiones: versiones 18.4 anteriores a 18.4R1-S8, 18.4R2-S8, 18.4R3-S8; versiones 19.1 anteriores a 19.1R2-S3, 19.1R3-S5; versiones 19.2 anteriores a 19.2R1-S7, 19.2R3-S2; versiones 19.3 anteriores a 19.3R2-S6, 19.3R3-S2; 19. 4 versiones anteriores a 19.4R1-S4, 19.4R2-S4, 19.4R3-S3; versiones 20.1 anteriores a 20.1R2-S2, 20.1R3; versiones 20.2 anteriores a 20.2R2-S3, 20.2R3; versiones 20.3 anteriores a 20.3R2-S1, 20.3R3; versiones 20.4 anteriores a 20.4R2. Este problema no afecta a las versiones de Juniper Networks Junos OS anteriores a 18.4R1. Juniper Networks Junos OS Evolved: Todas las versiones anteriores a 20.4R2-EVO; versiones 21.1-EVO anteriores a 21.1R2-EVO

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2021-04-15 CVE Reserved
2021-10-19 CVE Published
2023-05-12 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-269: Improper Privilege Management

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://kb.juniper.net/JSA11215	2021-10-25

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r2-s8		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r3-s8		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r3-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r2-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r2-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r2-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.3 Search vendor "Juniper" for product "Junos" and version "19.3"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.4 Search vendor "Juniper" for product "Junos" and version "19.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.4 Search vendor "Juniper" for product "Junos" and version "19.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.4 Search vendor "Juniper" for product "Junos" and version "19.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.4 Search vendor "Juniper" for product "Junos" and version "19.4"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.4 Search vendor "Juniper" for product "Junos" and version "19.4"		r2-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.4 Search vendor "Juniper" for product "Junos" and version "19.4"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.1 Search vendor "Juniper" for product "Junos" and version "20.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.1 Search vendor "Juniper" for product "Junos" and version "20.1"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.1 Search vendor "Juniper" for product "Junos" and version "20.1"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.1 Search vendor "Juniper" for product "Junos" and version "20.1"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.1 Search vendor "Juniper" for product "Junos" and version "20.1"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.1 Search vendor "Juniper" for product "Junos" and version "20.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.1 Search vendor "Juniper" for product "Junos" and version "20.1"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.1 Search vendor "Juniper" for product "Junos" and version "20.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.2 Search vendor "Juniper" for product "Junos" and version "20.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.2 Search vendor "Juniper" for product "Junos" and version "20.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.2 Search vendor "Juniper" for product "Junos" and version "20.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.2 Search vendor "Juniper" for product "Junos" and version "20.2"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.2 Search vendor "Juniper" for product "Junos" and version "20.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.2 Search vendor "Juniper" for product "Junos" and version "20.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.2 Search vendor "Juniper" for product "Junos" and version "20.2"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.2 Search vendor "Juniper" for product "Junos" and version "20.2"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.3 Search vendor "Juniper" for product "Junos" and version "20.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.3 Search vendor "Juniper" for product "Junos" and version "20.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.3 Search vendor "Juniper" for product "Junos" and version "20.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.3 Search vendor "Juniper" for product "Junos" and version "20.3"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				20.4 Search vendor "Juniper" for product "Junos" and version "20.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				18.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "18.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.1"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.1"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.1"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.3 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				20.4 Search vendor "Juniper" for product "Junos Os Evolved" and version "20.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				21.1 Search vendor "Juniper" for product "Junos Os Evolved" and version "21.1"		r1-s1		Affected