CVE-2021-0276CWE-121

Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.

Critical · published July 15, 2021

CVSS v3.1
9.8
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

🔥 A single crafted packet can send the radius daemon spiraling into crash-land! This stack-based buffer overflow in Juniper Networks SBR Carrier is nothing to take lightly! ⚠️ Think of it like a restaurant where a diner keeps sending back their dish for minute adjustments. Every time they scream for attention, the kitchen gets overwhelmed, and the whole service grinds to a halt! That's what happens here, as attackers bombard the server with these specially crafted packets, causing chaos. An attacker could unleash a barrage of these packets, leaving your server in a perpetual state of crisis — crashing the radius daemon repeatedly and resulting in a devastating Denial of Service (DoS). In the worst-case scenario, this vulnerability could even allow for remote code execution (RCE), giving attackers a foothold into your system. Absolutely devastating!

Put simply

Think of it like a restaurant where a diner keeps sending back their dish for minute adjustments. Every time they scream for attention, the kitchen gets overwhelmed, and the whole service grinds to a halt! That's what happens here, as attackers bombard the server with these specially crafted packets, causing chaos. This vulnerability arises from a stack-based buffer overflow, where specific packets can exploit the radius daemon's handling of EAP authentication, leading to crashes and potential remote code execution.

What to do

An attacker could unleash a barrage of these packets, leaving your server in a perpetual state of crisis — crashing the radius daemon repeatedly and resulting in a devastating Denial of Service (DoS). In the worst-case scenario, this vulnerability could even allow for remote code execution (RCE), giving attackers a foothold into your system. Absolutely devastating! Immediately update to Juniper Networks SBR Carrier versions 8.4.1R19, 8.5.0R10, or 8.6.0R4 to ensure you're protected. Moreover, consider setting up packet filtering to block suspicious traffic until a full patch is applied. Security hero status: activated! You’ve got this! With these steps, you can secure your system and take back control! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02314 · 83.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2021-07-15T20:00Z
EPSS history
Timeline
  • 15 JUL 20:00Z
    Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.
    cvelistv5