CVE-2021-31349 Session Smart Router: Authentication Bypass Vulnerability
An attacker can bypass authentication via an internal HTTP header to view files, change settings, and execute arbitrary code on Juniper Session Smart Routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-31349?
CVE-2021-31349 is a critical authentication bypass vulnerability in Juniper Networks 128 Technology Session Smart Router, published on 19 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The usage of an internal HTTP header created an authentication bypass vulnerability (CWE-287), allowing an attacker to view internal files, change settings, manipulate services and execute arbitrary code. This issue affects all Juniper Networks 128 Technology Session Smart Router versions prior to 4.5.11, and all versions of 5.0 up to and including 5.0.1.
Weakness: CWE-287
Which versions are affected by CVE-2021-31349?
It affects 1 product.
Products include Juniper 128 Technology Session Smart Router Firmware.
How do I fix CVE-2021-31349?
No fix has been published for CVE-2021-31349 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-31349 being exploited?
There is no known exploitation of CVE-2021-31349 in the wild and no public exploit code.
Sources
Also known as GHSA-4r2w-j4p7-rw4p.