Explain the CVE ID: What does the identifier CVE-2021-0112 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0112.

Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0112?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0112?


Explain the CVE ID: What does the identifier CVE-2021-0113 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0113.

Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0113?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0113?


Explain the CVE ID: What does the identifier CVE-2021-0114 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0114.

Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0114?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220210-0007/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0114?


Explain the CVE ID: What does the identifier CVE-2021-0115 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0115.

Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0115?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0115?


Explain the CVE ID: What does the identifier CVE-2021-0116 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0116.

Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0116?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0116?


Explain the CVE ID: What does the identifier CVE-2021-0117 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0117.

Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0117?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0117?


Explain the CVE ID: What does the identifier CVE-2021-0118 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0118.

Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0118?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0118?


Explain the CVE ID: What does the identifier CVE-2021-0119 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0119.

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.


Provide references for further information: Can you share references or external links related to CVE-2021-0119?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0119?


Explain the CVE ID: What does the identifier CVE-2021-0120 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0120.

Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an authenticated user to potentially enable denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0120?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0120?


Explain the CVE ID: What does the identifier CVE-2021-0121 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0121.

Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow authenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0121?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0121?


Explain the CVE ID: What does the identifier CVE-2021-0122 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0122.


Provide references for further information: Can you share references or external links related to CVE-2021-0122?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0122?


Explain the CVE ID: What does the identifier CVE-2021-0123 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0123.


Provide references for further information: Can you share references or external links related to CVE-2021-0123?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0123?


Explain the CVE ID: What does the identifier CVE-2021-0124 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0124.

Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.


Provide references for further information: Can you share references or external links related to CVE-2021-0124?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0124?


Explain the CVE ID: What does the identifier CVE-2021-0125 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0125.


Provide references for further information: Can you share references or external links related to CVE-2021-0125?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0125?


Explain the CVE ID: What does the identifier CVE-2021-0126 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0126.

Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0126?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0126?


Explain the CVE ID: What does the identifier CVE-2021-0127 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0127.

Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0127?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220210-0008/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0127?


Explain the CVE ID: What does the identifier CVE-2021-0128 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0128.


Provide references for further information: Can you share references or external links related to CVE-2021-0128?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0128?


Explain the CVE ID: What does the identifier CVE-2021-0129 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0129.

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0129?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html'}, {'name': '[debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html'}, {'name': '[debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html'}, {'name': '[debian-lts-announce] 20210626 [SECURITY] [DLA 2692-1] bluez security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20210716-0002/'}, {'name': 'DSA-4951', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4951'}, {'name': 'GLSA-202209-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202209-16'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0129?


Explain the CVE ID: What does the identifier CVE-2021-0130 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0130.


Provide references for further information: Can you share references or external links related to CVE-2021-0130?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0130?


Explain the CVE ID: What does the identifier CVE-2021-0131 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0131.

Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access.


Provide references for further information: Can you share references or external links related to CVE-2021-0131?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0131?


Explain the CVE ID: What does the identifier CVE-2021-0132 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0132.

Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.


Provide references for further information: Can you share references or external links related to CVE-2021-0132?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0132?


Explain the CVE ID: What does the identifier CVE-2021-0133 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0133.

Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access.


Provide references for further information: Can you share references or external links related to CVE-2021-0133?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0133?


Explain the CVE ID: What does the identifier CVE-2021-0134 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0134.

Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.


Provide references for further information: Can you share references or external links related to CVE-2021-0134?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0134?


Explain the CVE ID: What does the identifier CVE-2021-0135 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0135.

Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0135?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0135?


Explain the CVE ID: What does the identifier CVE-2021-0136 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0136.


Provide references for further information: Can you share references or external links related to CVE-2021-0136?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0136?


Explain the CVE ID: What does the identifier CVE-2021-0137 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0137.


Provide references for further information: Can you share references or external links related to CVE-2021-0137?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0137?


Explain the CVE ID: What does the identifier CVE-2021-0138 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0138.


Provide references for further information: Can you share references or external links related to CVE-2021-0138?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0138?


Explain the CVE ID: What does the identifier CVE-2021-0139 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0139.


Provide references for further information: Can you share references or external links related to CVE-2021-0139?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0139?


Explain the CVE ID: What does the identifier CVE-2021-0140 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0140.


Provide references for further information: Can you share references or external links related to CVE-2021-0140?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0140?


Explain the CVE ID: What does the identifier CVE-2021-0141 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0141.


Provide references for further information: Can you share references or external links related to CVE-2021-0141?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0141?


Explain the CVE ID: What does the identifier CVE-2021-0142 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0142.


Provide references for further information: Can you share references or external links related to CVE-2021-0142?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0142?


Explain the CVE ID: What does the identifier CVE-2021-0143 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0143.

Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0143?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0143?


Explain the CVE ID: What does the identifier CVE-2021-0144 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0144.

Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0144?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00525.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0144?


Explain the CVE ID: What does the identifier CVE-2021-0145 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0145.

Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0145?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00561.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220210-0009/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0145?


Explain the CVE ID: What does the identifier CVE-2021-0146 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0146.

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.


Provide references for further information: Can you share references or external links related to CVE-2021-0146?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20211210-0006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0146?


Explain the CVE ID: What does the identifier CVE-2021-0147 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0147.

Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_lbg_b0-21ww02a may allow a privileged user to potentially enable denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0147?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0147?


Explain the CVE ID: What does the identifier CVE-2021-0148 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0148.

Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0148?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0148?


Explain the CVE ID: What does the identifier CVE-2021-0149 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0149.


Provide references for further information: Can you share references or external links related to CVE-2021-0149?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0149?


Explain the CVE ID: What does the identifier CVE-2021-0150 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0150.


Provide references for further information: Can you share references or external links related to CVE-2021-0150?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0150?


Explain the CVE ID: What does the identifier CVE-2021-0151 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0151.

Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0151?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0151?


Explain the CVE ID: What does the identifier CVE-2021-0152 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0152.

Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0152?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0152?


Explain the CVE ID: What does the identifier CVE-2021-0153 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0153.

Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0153?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220818-0003/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0153?


Explain the CVE ID: What does the identifier CVE-2021-0154 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0154.

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0154?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0154?


Explain the CVE ID: What does the identifier CVE-2021-0155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0155.

Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0155?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0155?


Explain the CVE ID: What does the identifier CVE-2021-0156 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0156.

Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0156?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220210-0007/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0156?


Explain the CVE ID: What does the identifier CVE-2021-0157 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0157.

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0157?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0157?


Explain the CVE ID: What does the identifier CVE-2021-0158 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0158.

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0158?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0158?


Explain the CVE ID: What does the identifier CVE-2021-0159 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0159.

Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0159?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0159?


Explain the CVE ID: What does the identifier CVE-2021-0160 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0160.

Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0160?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0160?


Explain the CVE ID: What does the identifier CVE-2021-0161 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0161.

Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0161?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0161?


Explain the CVE ID: What does the identifier CVE-2021-0162 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0162.

Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0162?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0162?


Explain the CVE ID: What does the identifier CVE-2021-0163 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0163.

Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0163?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0163?


Explain the CVE ID: What does the identifier CVE-2021-0164 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0164.

Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0164?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0164?


Explain the CVE ID: What does the identifier CVE-2021-0165 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0165.

Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0165?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0165?


Explain the CVE ID: What does the identifier CVE-2021-0166 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0166.

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0166?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0166?


Explain the CVE ID: What does the identifier CVE-2021-0167 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0167.

Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0167?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0167?


Explain the CVE ID: What does the identifier CVE-2021-0168 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0168.

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0168?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0168?


Explain the CVE ID: What does the identifier CVE-2021-0169 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0169.

Uncontrolled Search Path Element in software for Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0169?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0169?


Explain the CVE ID: What does the identifier CVE-2021-0170 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0170.

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0170?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0170?


Explain the CVE ID: What does the identifier CVE-2021-0171 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0171.

Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0171?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0171?


Explain the CVE ID: What does the identifier CVE-2021-0172 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0172.

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0172?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0172?


Explain the CVE ID: What does the identifier CVE-2021-0173 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0173.

Improper Validation of Consistency within input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0173?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0173?


Explain the CVE ID: What does the identifier CVE-2021-0174 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0174.

Improper Use of Validation Framework in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0174?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0174?


Explain the CVE ID: What does the identifier CVE-2021-0175 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0175.

Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0175?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0175?


Explain the CVE ID: What does the identifier CVE-2021-0176 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0176.

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0176?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0176?


Explain the CVE ID: What does the identifier CVE-2021-0177 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0177.

Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0177?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0177?


Explain the CVE ID: What does the identifier CVE-2021-0178 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0178.

Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0178?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0178?


Explain the CVE ID: What does the identifier CVE-2021-0179 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0179.

Improper Use of Validation Framework in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0179?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0179?


Explain the CVE ID: What does the identifier CVE-2021-0180 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0180.

Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable privilege escalation via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0180?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0180?


Explain the CVE ID: What does the identifier CVE-2021-0181 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0181.


Provide references for further information: Can you share references or external links related to CVE-2021-0181?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0181?


Explain the CVE ID: What does the identifier CVE-2021-0182 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0182.

Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable information disclosure via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0182?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0182?


Explain the CVE ID: What does the identifier CVE-2021-0183 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0183.

Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.


Provide references for further information: Can you share references or external links related to CVE-2021-0183?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0183?


Explain the CVE ID: What does the identifier CVE-2021-0184 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0184.


Provide references for further information: Can you share references or external links related to CVE-2021-0184?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0184?


Explain the CVE ID: What does the identifier CVE-2021-0185 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0185.

Improper input validation in the firmware for some Intel(R) Server Board M10JNP Family before version 7.216 may allow a privileged user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0185?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0185?


Explain the CVE ID: What does the identifier CVE-2021-0186 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0186.

Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0186?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0186?


Explain the CVE ID: What does the identifier CVE-2021-0187 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0187.

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0187?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0187?


Explain the CVE ID: What does the identifier CVE-2021-0188 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0188.

Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0188?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220818-0003/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0188?


Explain the CVE ID: What does the identifier CVE-2021-0189 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0189.

Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0189?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0189?


Explain the CVE ID: What does the identifier CVE-2021-0190 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0190.

Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0190?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0190?


Explain the CVE ID: What does the identifier CVE-2021-0191 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0191.


Provide references for further information: Can you share references or external links related to CVE-2021-0191?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0191?


Explain the CVE ID: What does the identifier CVE-2021-0192 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0192.


Provide references for further information: Can you share references or external links related to CVE-2021-0192?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0192?


Explain the CVE ID: What does the identifier CVE-2021-0193 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0193.

Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access.


Provide references for further information: Can you share references or external links related to CVE-2021-0193?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0193?


Explain the CVE ID: What does the identifier CVE-2021-0194 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0194.

Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access.


Provide references for further information: Can you share references or external links related to CVE-2021-0194?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0194?


Explain the CVE ID: What does the identifier CVE-2021-0195 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0195.


Provide references for further information: Can you share references or external links related to CVE-2021-0195?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0195?


Explain the CVE ID: What does the identifier CVE-2021-0196 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0196.

Improper access control in kernel mode driver for some Intel(R) NUC 9 Extreme Laptop Kits before version 2.2.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0196?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0196?


Explain the CVE ID: What does the identifier CVE-2021-0197 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0197.

Protection mechanism failure in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to enable a denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0197?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20211210-0004/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0197?


Explain the CVE ID: What does the identifier CVE-2021-0198 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0198.

Improper access control in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to potentially enable a denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0198?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0198?


Explain the CVE ID: What does the identifier CVE-2021-0199 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0199.

Improper input validation in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0199?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0199?


Explain the CVE ID: What does the identifier CVE-2021-0200 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0200.

Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.


Provide references for further information: Can you share references or external links related to CVE-2021-0200?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0200?


Explain the CVE ID: What does the identifier CVE-2021-0202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0202.

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrated Routing and Bridging (IRB) interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge (CE) device may cause memory leak in the MPC which can cause an out of memory and MPC restarts. When this issue occurs, there will be temporary traffic interruption until the MPC is restored. An administrator can use the following CLI command to monitor the status of memory usage level of the MPC: user@device> show system resource-monitor fpc FPC Resource Usage Summary Free Heap Mem Watermark : 20 % Free NH Mem Watermark : 20 % Free Filter Mem Watermark : 20 % * - Watermark reached Slot # % Heap Free RTT Average RTT 1 87 PFE # % ENCAP mem Free % NH mem Free % FW mem Free 0 NA 88 99 1 NA 89 99 When the issue is occurring, the value of “% NH mem Free” will go down until the MPC restarts. This issue affects MX Series and EX9200 Series with Trio-based PFEs (Packet Forwarding Engines). Please refer to https://kb.juniper.net/KB25385 for the list of Trio-based PFEs. This issue affects Juniper Networks Junos OS on MX Series, EX9200 Series: 17.3R3-S8; 17.4R3-S2; 18.2R3-S4, 18.2R3-S5; 18.3R3-S2, 18.3R3-S3; 18.4 versions starting from 18.4R3-S1 and later versions prior to 18.4R3-S6; 19.2 versions starting from 19.2R2 and later versions prior to 19.2R3-S1; 19.4 versions starting from 19.4R2 and later versions prior to 19.4R2-S3, 19.4R3; 20.2 versions starting from 20.2R1 and later versions prior to 20.2R1-S3, 20.2R2. This issue does not affect Juniper Networks Junos OS: 18.1, 19.1, 19.3, 20.1.


Provide references for further information: Can you share references or external links related to CVE-2021-0202?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11092'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0202?


Explain the CVE ID: What does the identifier CVE-2021-0203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0203.

On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicast, and unknown unicast packets when a specified traffic level is exceeded, thus preventing packets from proliferating and degrading the LAN. Note: this issue does not affect EX2200, EX3300, EX4200, and EX9200 Series. This issue affects Juniper Networks Junos OS on EX Series and QFX5K Series: 15.1 versions prior to 15.1R7-S7; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S5, 18.4R3-S3; 19.1 versions prior to 19.1R2-S2, 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R2-S1, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S2, 20.1R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0203?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11093'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0203?


Explain the CVE ID: What does the identifier CVE-2021-0204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0204.

A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos OS may allow a locally authenticated shell user the ability to create and read database files generated by the dexp utility, including password hashes of local users. Since dexp is shipped with setuid permissions enabled and is owned by the root user, this vulnerability may allow a local privileged user the ability to run dexp with root privileges and access sensitive information in the dexp database. This issue affects Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S8; 15.1X49 versions prior to 15.1X49-D230; 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D34; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3-S1; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0204?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11114'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0204?


Explain the CVE ID: What does the identifier CVE-2021-0205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0205.

When the "Intrusion Detection Service" (IDS) feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or destination prefix, it may incorrectly match the prefix as /32, causing the filter to block unexpected traffic. This issue affects only IPv6 prefixes when used as source and destination. This issue affects MX Series devices using MS-MPC, MS-MIC or MS-SPC3 service cards with IDS service configured. This issue affects: Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S10 on MX Series; 17.4 versions prior to 17.4R3-S3 on MX Series; 18.1 versions prior to 18.1R3-S11 on MX Series; 18.2 versions prior to 18.2R3-S6 on MX Series; 18.3 versions prior to 18.3R3-S4 on MX Series; 18.4 versions prior to 18.4R3-S6 on MX Series; 19.1 versions prior to 19.1R2-S2, 19.1R3-S3 on MX Series; 19.2 versions prior to 19.2R3-S1 on MX Series; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1 on MX Series; 19.4 versions prior to 19.4R3 on MX Series; 20.1 versions prior to 20.1R2 on MX Series; 20.2 versions prior to 20.2R2 on MX Series;


Provide references for further information: Can you share references or external links related to CVE-2021-0205?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11095'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0205?


Explain the CVE ID: What does the identifier CVE-2021-0206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0206.

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker can repeatedly disable the PFE causing a sustained Denial of Service (DoS). This issue only affects Juniper Networks NFX Series, SRX Series platforms when SSL Proxy is configured. This issue affects Juniper Networks Junos OS on NFX Series and SRX Series: 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S1; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS versions on NFX Series and SRX Series prior to 18.3R1.


Provide references for further information: Can you share references or external links related to CVE-2021-0206?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11096'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0206?


Explain the CVE ID: What does the identifier CVE-2021-0207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0207.

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being redirected to an egress interface on a different VLAN. This causes a Denial of Service (DoS) to those clients sending these particular types of traffic. Such traffic being sent by a client may appear genuine, but is non-standard in nature and should be considered as potentially malicious, and can be targeted to the device, or destined through it for the issue to occur. This issues affects IPv4 and IPv6 traffic. An indicator of compromise may be found by checking log files. You may find that traffic on the input interface has 100% of traffic flowing into the device, yet the egress interface shows 0 pps leaving the device. For example: [show interfaces "interface" statistics detail] Output between two interfaces would reveal something similar to: Ingress, first interface: -------------------- Interface Link Input packets (pps) Output packets (pps) et-0/0/0 Up 9999999999 (9999) 1 (0) -------------------- Egress, second interface: -------------------- Interface Link Input packets (pps) Output packets (pps) et-0/0/1 Up 0 (0) 9999999999 (0) -------------------- Dropped packets will not show up in DDoS monitoring/protection counters as issue is not caused by anti-DDoS protection mechanisms. This issue affects: Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S7 on NFX250, QFX5K Series, EX4600; 17.4 versions prior to 17.4R2-S11, 17.4R3-S3 on NFX250, QFX5K Series, EX4600; 18.1 versions prior to 18.1R3-S9 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4600; 18.2 versions prior to 18.2R3-S3 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600; 18.3 versions prior to 18.3R3-S1 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 19.2 versions prior to 19.2R1-S5, 19.2R2 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 19.3 versions prior to 19.3R2-S3, 19.3R3 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 19.4 versions prior to 19.4R1-S2, 19.4R2 on NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series. This issue does not affect Junos OS releases prior to 17.2R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0207?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11097'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0207?


Explain the CVE ID: What does the identifier CVE-2021-0208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0208.

An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to send a malformed RSVP packet when bidirectional LSPs are in use, which when received by an egress router crashes the RPD causing a Denial of Service (DoS) condition. Continued receipt of the packet will sustain the Denial of Service. This issue affects: Juniper Networks Junos OS: All versions prior to 17.3R3-S10 except 15.1X49-D240 for SRX series; 17.4 versions prior to 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S4; 18.3 versions prior to 18.3R3-S2; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R3-S3; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3-S1; 20.1 versions prior to 20.1R1-S4, 20.1R2; 15.1X49 versions prior to 15.1X49-D240 on SRX Series. Juniper Networks Junos OS Evolved: 19.3 versions prior to 19.3R2-S5-EVO; 19.4 versions prior to 19.4R2-S2-EVO; 20.1 versions prior to 20.1R1-S4-EVO.


Provide references for further information: Can you share references or external links related to CVE-2021-0208?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11098'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/disable-edit-protocols-rsvp.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/corouted-bidirectional-edit-protocols-mpls.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0208?


Explain the CVE ID: What does the identifier CVE-2021-0209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0209.

In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service (DoS). Continued receipt of these types of valid BGP update packets will cause an extended Denial of Service condition. RPD will require a restart to recover. An indicator of compromise is to see if the file rpd.re exists by issuing the command: show system core-dumps This issue affects: Juniper Networks Junos OS Evolved 19.4 versions prior to 19.4R2-S2-EVO; 20.1 versions prior to 20.1R1-S2-EVO, 20.1R2-S1-EVO. This issue does not affect Junos OS.


Provide references for further information: Can you share references or external links related to CVE-2021-0209?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0209?


Explain the CVE ID: What does the identifier CVE-2021-0210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0210.

An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S17; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3, 19.2R3-S1; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0210?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0210?


Explain the CVE ID: What does the identifier CVE-2021-0211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0211.

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain leading to disruptions in network traffic causing a Denial of Service (DoS) condition. Continued receipt of these update messages will cause a sustained Denial of Service condition. This issue affects Juniper Networks: Junos OS: All versions prior to 17.3R3-S10 with the exceptions of 15.1X49-D240 on SRX Series and 15.1R7-S8 on EX Series; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R1-S3, 19.4R2-S3, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S3 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2. Junos OS Evolved: All versions prior to 20.3R1-S1-EVO, 20.3R2-EVO.


Provide references for further information: Can you share references or external links related to CVE-2021-0211?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11101'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0211?


Explain the CVE ID: What does the identifier CVE-2021-0212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0212.

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail Networking versions prior to 1911.31.


Provide references for further information: Can you share references or external links related to CVE-2021-0212?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11102'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0212?


Explain the CVE ID: What does the identifier CVE-2021-0214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0214.

A vulnerability in the distributed or centralized periodic packet management daemon (PPMD) of Juniper Networks Junos OS may cause receipt of a malformed packet to crash and restart the PPMD process, leading to network destabilization, service interruption, and a Denial of Service (DoS) condition. Continued receipt and processing of these malformed packets will repeatedly crash the PPMD process and sustain the Denial of Service (DoS) condition. Due to the nature of the specifically crafted packet, exploitation of this issue requires direct, adjacent connectivity to the vulnerable component. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S12, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S5, 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0214?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA11117'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0214?


Explain the CVE ID: What does the identifier CVE-2021-0215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0215.

On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwarding, to crash and restart. An administrator can use the following CLI command to monitor the status of memory consumption: user@device> show task memory detail Please refer to https://kb.juniper.net/KB31522 for details. This issue affects Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D54; 15.1X49 versions prior to 15.1X49-D240 ; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. This issue does not affect Juniper Networks Junos OS 12.3, 15.1.


Provide references for further information: Can you share references or external links related to CVE-2021-0215?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11105'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0215?


Explain the CVE ID: What does the identifier CVE-2021-0216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0216.

A vulnerability in Juniper Networks Junos OS running on the ACX5448 and ACX710 platforms may cause BFD sessions to flap when a high rate of transit ARP packets are received. This, in turn, may impact routing protocols and network stability, leading to a Denial of Service (DoS) condition. When a high rate of transit ARP packets are exceptioned to the CPU and BFD flaps, the following log messages may be seen: bfdd[15864]: BFDD_STATE_UP_TO_DOWN: BFD Session 192.168.14.3 (IFL 232) state Up -> Down LD/RD(17/19) Up time:11:38:17 Local diag: CtlExpire Remote diag: None Reason: Detect Timer Expiry. bfdd[15864]: BFDD_TRAP_SHOP_STATE_DOWN: local discriminator: 17, new state: down, interface: irb.998, peer addr: 192.168.14.3 rpd[15839]: RPD_ISIS_ADJDOWN: IS-IS lost L2 adjacency to peer on irb.998, reason: BFD Session Down bfdd[15864]: BFDD_TRAP_SHOP_STATE_UP: local discriminator: 17, new state: up, interface: irb.998, peer addr: 192.168.14.3 This issue only affects the ACX5448 Series and ACX710 Series routers. No other products or platforms are affected by this vulnerability. This issue affects Juniper Networks Junos OS: 18.2 versions prior to 18.2R3-S8 on ACX5448; 18.3 versions prior to 18.3R3-S5 on ACX5448; 18.4 versions prior to 18.4R1-S6, 18.4R3-S7 on ACX5448; 19.1 versions prior to 19.1R3-S5 on ACX5448; 19.2 versions prior to 19.2R2, 19.2R3 on ACX5448; 19.3 versions prior to 19.3R3 on ACX5448; 19.4 versions prior to 19.4R3 on ACX5448; 20.1 versions prior to 20.1R2 on ACX5448; 20.2 versions prior to 20.2R2 on ACX5448 and ACX710.


Provide references for further information: Can you share references or external links related to CVE-2021-0216?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA11118'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0216?


Explain the CVE ID: What does the identifier CVE-2021-0217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0217.

A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running Juniper Networks Junos OS with DHCP local/relay server configured may lead to exhaustion of DMA memory causing a Denial of Service (DoS). Over time, exploitation of this vulnerability may cause traffic to stop being forwarded, or to crashing of the fxpc process. When Packet DMA heap utilization reaches 99%, the system will become unstable. Packet DMA heap utilization can be monitored through the following command: user@junos# request pfe execute target fpc0 timeout 30 command "show heap" ID Base Total(b) Free(b) Used(b) % Name -- ---------- ----------- ----------- ----------- --- ----------- 0 213301a8 536870488 387228840 149641648 27 Kernel 1 91800000 8388608 3735120 4653488 55 DMA 2 92000000 75497472 74452192 1045280 1 PKT DMA DESC 3 d330000 335544320 257091400 78452920 23 Bcm_sdk 4 96800000 184549376 2408 184546968 99 Packet DMA <--- 5 903fffe0 20971504 20971504 0 0 Blob An indication of the issue occurring may be observed through the following log messages: Dec 10 08:07:00.124 2020 hostname fpc0 brcm_pkt_buf_alloc:523 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.126 2020 hostname fpc0 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.128 2020 hostname fpc0 brcm_pkt_buf_alloc:523 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.130 2020 hostnameC fpc0 (buf alloc) failed allocating packet buffer This issue affects Juniper Networks Junos OS on EX Series and QFX Series: 17.4R3 versions prior to 17.4R3-S3; 18.1R3 versions between 18.1R3-S6 and 18.1R3-S11; 18.2R3 versions prior to 18.2R3-S6; 18.3R3 versions prior to 18.3R3-S4; 18.4R2 versions prior to 18.4R2-S5; 18.4R3 versions prior to 18.4R3-S6; 19.1 versions between 19.1R2 and 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2. Junos OS versions prior to 17.4R3 are unaffected by this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2021-0217?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11107'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0217?


Explain the CVE ID: What does the identifier CVE-2021-0218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0218.

A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges to execute commands with root privilege. license-check is a daemon used to manage licenses in Junos OS. To update licenses, a user executes the command 'request system license update' via the CLI. An attacker with access to this CLI command may be able to exploit the vulnerability. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0218?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11108'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0218?


Explain the CVE ID: What does the identifier CVE-2021-0219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0219.

A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticated attacker with privileges to execute commands with root privilege. To validate a package in Junos before installation, an administrator executes the command 'request system software add validate-on-host' via the CLI. An attacker with access to this CLI command may be able to exploit this vulnerability. This issue affects Juniper Networks Junos OS: all versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R2-S8, 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0219?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11109'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0219?


Explain the CVE ID: What does the identifier CVE-2021-0220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0220.

The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser (for example via XSS) or access cached contents may be able to obtain a copy of credentials managed by Junos Space. The impact of a successful attack includes, but is not limited to, obtaining access to other servers connected to the Junos Space Management Platform. This issue affects Juniper Networks Junos Space versions prior to 20.3R1.


Provide references for further information: Can you share references or external links related to CVE-2021-0220?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11110'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0220?


Explain the CVE ID: What does the identifier CVE-2021-0221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0221.

In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loop may occur upon receipt of specific IP multicast traffic. The traffic loop will cause interface traffic to increase abnormally, ultimately leading to a Denial of Service (DoS) in packet processing. The following command could be used to monitor the interface traffic: user@junos> monitor interface traffic Interface Link Input packets (pps) Output packets (pps) et-0/0/1 Up 6492089274364 (70994959) 6492089235319 (70994956) et-0/0/25 Up 343458103 (1) 156844 (0) ae0 Up 9132519197257 (70994959) 9132519139454 (70994956) This issue affects Juniper Networks Junos OS on QFX Series: all versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0221?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11111'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0221?


Explain the CVE ID: What does the identifier CVE-2021-0222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0222.

A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending certain crafted protocol packets from an adjacent device with invalid payloads to the device. These crafted packets, which should be discarded, are instead replicated and sent to the RE. Over time, a Denial of Service (DoS) occurs. Continued receipt of these crafted protocol packets will cause an extended Denial of Service (DoS) condition, which may cause wider traffic impact due to protocol flapping. An indication of compromise is to check "monitor interface traffic" on the ingress and egress port packet counts. For each ingress packet, two duplicate packets are seen on egress. This issue can be triggered by IPv4 and IPv6 packets. This issue affects all traffic through the device. This issue affects: Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D53 on EX4300, QFX3500, QFX5100, EX4600; 15.1 versions prior to 15.1R7-S6 on EX4300, QFX3500, QFX5100, EX4600; 16.1 versions prior to 16.1R7-S7 on EX4300, QFX5100, EX4600; 17.1 versions prior to 17.1R2-S11 on EX4300, QFX5100, EX4600; 17.1 versions prior to 117.1R3-S2 on EX4300; 17.2 versions prior to 17.2R1-S9 on EX4300; 17.2 versions prior to 17.2R3-S3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7 on EX4300, QFX5100, EX4600, QFX5110, QFX5200; 17.4 versions prior to 17.4R2-S9, 17.4R3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200; 18.1 versions prior to 18.1R3-S9 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, EX2300, EX3400; 18.2 versions prior to 18.2R2-S7 on EX4300; 18.2 versions prior to 18.2R3-S3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, EX2300, EX3400; 18.3 versions prior to 18.3R2-S3, on EX4300; 18.3 versions prior to 18.3R1-S7, 18.3R3-S1 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; 19.1 versions prior to 19.1R1-S4, 19.1R2-S1, 19.1R3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; 19.2 versions prior to 19.2R1-S4, 19.2R2 on EX4300; 19.2 versions prior to 19.2R1-S3, 19.2R2 on QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; 19.3 versions prior to 19.3R2-S1, 19.3R3 on EX4300; 19.3 versions prior to 19.3R1-S1, 19.3R2, 19.3R3 on QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400;


Provide references for further information: Can you share references or external links related to CVE-2021-0222?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11094'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0222?


Explain the CVE ID: What does the identifier CVE-2021-0223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0223.

A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is shipped with setuid permissions enabled and is owned by the root user, allowing local users to run telnetd.real with root privileges. This issue affects Juniper Networks Junos OS: all versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0223?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA11114'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0223?


Explain the CVE ID: What does the identifier CVE-2021-0224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0224.

A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber (BRAS) nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon (ANCPD) to crash and restart, leading to a Denial of Service (DoS) condition. Continued processing of spoofed subscriber nodes will create a sustained Denial of Service (DoS) condition. When the number of subscribers attempting to connect exceeds the configured maximum-discovery-table-entries value, the subscriber fails to map to an internal neighbor entry, causing the ANCPD process to crash. This issue affects Juniper Networks Junos OS: All versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R2-S13; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R1-S8, 18.4R3-S8; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S2; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R2.


Provide references for further information: Can you share references or external links related to CVE-2021-0224?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA11119'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0224?


Explain the CVE ID: What does the identifier CVE-2021-0225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0225.

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to see the failures with filter configuration: user@device> show log kfirewall-agent.log | match ERROR Jul 23 14:16:03 ERROR: filter not supported This issue affects Juniper Networks Junos OS Evolved: Versions 19.1R1-EVO and above prior to 20.3R1-S2-EVO, 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS.


Provide references for further information: Can you share references or external links related to CVE-2021-0225?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA11120'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0225?


Explain the CVE ID: What does the identifier CVE-2021-0226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0226.

On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue does not affect IPv4 BGP sessions. This issue affects IBGP or EBGP peer sessions with IPv6. This issue affects: Juniper Networks Junos OS Evolved: 19.4 versions prior to 19.4R2-S3-EVO; 20.1 versions prior to 20.1R2-S3-EVO; 20.2 versions prior to 20.2R2-S1-EVO; 20.3 versions prior to 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS releases.


Provide references for further information: Can you share references or external links related to CVE-2021-0226?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA11121'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0226?


Explain the CVE ID: What does the identifier CVE-2021-0227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0227.

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service (DoS) by sending certain crafted HTTP packets. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. When this issue occurs, web-management, NTP daemon (ntpd) and Layer 2 Control Protocol process (L2CPD) daemons might crash. This issue affects Juniper Networks Junos OS on SRX Series: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S2, 20.1R2;


Provide references for further information: Can you share references or external links related to CVE-2021-0227?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA11122'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0227?


Explain the CVE ID: What does the identifier CVE-2021-0228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0228.

An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC (Modular Port Concentrator) deployed in (Ethernet VPN) EVPN-(Virtual Extensible LAN) VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause Distributed Denial of Service (DDoS) protection to trigger unexpectedly, resulting in traffic impact. Continued receipt and processing of this specific Layer 2 frames will sustain the Denial of Service (DoS) condition. An indication of compromise is to check DDOS LACP violations: user@device> show ddos-protection protocols statistics brief | match lacp This issue only affects the MX Series platforms with Trio-based MPC. No other products or platforms are affected. This issue affects: Juniper Networks Junos OS on MX Series: 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S8; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S2; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2-S1, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2;


Provide references for further information: Can you share references or external links related to CVE-2021-0228?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA11123'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0228?


Explain the CVE ID: What does the identifier CVE-2021-0229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-0229.

An uncontrolled resource consumption vulnerability in Message Queue Telemetry Transport (MQTT) server of Juniper Networks Junos OS allows an attacker to cause MQTT server to crash and restart leading to a Denial of Service (DoS) by sending a stream of specific packets. A Juniper Extension Toolkit (JET) application designed with a listening port uses the Message Queue Telemetry Transport (MQTT) protocol to connect to a mosquitto broker that is running on Junos OS to subscribe for events. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS: 16.1R1 and later versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S2; 20.1 versions prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 16.1R1.


Provide references for further information: Can you share references or external links related to CVE-2021-0229?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA11124'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-0229?


Explain the CVE ID: What does the identifier CVE-2021-0230 mean in the context of cybersecurity?