CVE-2021-0218

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges to execute commands with root privilege. license-check is a daemon used to manage licenses in Junos OS. To update licenses, a user executes the command 'request system license update' via the CLI. An attacker with access to this CLI command may be able to exploit the vulnerability. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Juniper Networks	Junos OS	>= 17.3, < 17.3R3-S9; >= 17.4, < 17.4R2-S12, 17.4R3-S3; >= 18.1, < 18.1R3-S11; >= 18.2, < 18.2R3-S6; >= 18.3, < 18.3R3-S4; >= 18.4, < 18.4R3-S6; >= 19.1, < 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; >= 19.2, < 19.2R3-S1; >= 19.3, < 19.3R2-S5, 19.3R3; >= 19.4, < 19.4R2-S2, 19.4R3; >= 20.1, < 20.1R1-S4, 20.1R2; >= 20.2, < 20.2R1-S2, 20.2R2

References

https://kb.juniper.net/JSA11108Vendor Advisory
https://kb.juniper.net/JSA11108Vendor Advisory

Timeline

Published: Jan 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-02196.7A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticate CVE-2021-02206.8The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the U CVE-2021-02216.5In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loop may occur upon rec CVE-2021-02227.4A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending certain crafted CVE-2021-02237.8A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to esca CVE-2021-02246.5A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber (BR CVE-2021-02255.8An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configu CVE-2021-02267.5On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, crea CVE-2021-02277.5An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series de CVE-2021-02286.5An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC (Modular P CVE-2021-02295.3An uncontrolled resource consumption vulnerability in Message Queue Telemetry Transport (MQTT) server of Juniper Networks Junos OS allows an CVE-2021-02307.5On Juniper Networks SRX Series devices with link aggregation (lag) configured, executing any operation that fetches Aggregated Ethernet (AE)