CVE-2021-0223: Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries
A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is shipped with setuid permissions enabled and is owned by the root user, allowing local users to run telnetd.real with root privileges. This issue affects Juniper Networks Junos OS: all versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-0223?
CVE-2021-0223 is considered a high severity vulnerability due to its potential to allow local privilege escalation for authenticated users.
How do I fix CVE-2021-0223?
To mitigate CVE-2021-0223, upgrade to the fixed versions of Junos OS as specified in the vendor's security advisory.
What type of systems are affected by CVE-2021-0223?
CVE-2021-0223 affects Juniper Networks Junos OS versions, particularly those with telnetd.real running with setuid permissions.
Can CVE-2021-0223 be exploited remotely?
No, CVE-2021-0223 requires local authentication, meaning the attacker must have access to the local system.
What are the implications of exploiting CVE-2021-0223?
Exploiting CVE-2021-0223 allows an attacker to gain root privileges, potentially leading to full control over the affected system.