What’s Vulnerable › Vulnerabilities

CVE-2021-0276: Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-15 · updated 2026-06-17
• Weakness: CWE-121

Description

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service (DoS) or leading to remote code execution (RCE). By continuously sending this specific packets, an attacker can repeatedly crash the radius daemon, causing a sustained Denial of Service (DoS). This issue affects Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R19; 8.5.0 versions prior to 8.5.0R10; 8.6.0 versions prior to 8.6.0R4.

Affected products

• Juniper Steel-Belted Radius Carrier: 8.4.1, 8.4.1-r13, 8.5.0, 8.5.0-r4, 8.6.0

References

• https://kb.juniper.net/JSA11180
• https://kb.juniper.net/JSA11180

Get alerted when CVE-2021-0276 or the next vulnerability affects your stack