CVE-2021-0218: Junos OS: Command injection vulnerability in license-check daemon
A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges to execute commands with root privilege. license-check is a daemon used to manage licenses in Junos OS. To update licenses, a user executes the command 'request system license update' via the CLI. An attacker with access to this CLI command may be able to exploit the vulnerability. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-0218?
CVE-2021-0218 has a severity rating of high due to its potential to allow command execution with root privileges.
How do I fix CVE-2021-0218?
To fix CVE-2021-0218, upgrade Junos OS to the latest patched version provided by Juniper Networks.
Who is affected by CVE-2021-0218?
CVE-2021-0218 affects locally authenticated users with low privileges on Juniper Networks Junos OS versions 17.3, 17.4, and 18.1.
What type of vulnerability is CVE-2021-0218?
CVE-2021-0218 is a command injection vulnerability in the license-check daemon.
Is exploitation of CVE-2021-0218 remote or local?
Exploitation of CVE-2021-0218 requires local access, as it can only be executed by authenticated users.