CVE-2021-0205

When the "Intrusion Detection Service" (IDS) feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or destination prefix, it may incorrectly match the prefix as /32, causing the filter to block unexpected traffic. This issue affects only IPv6 prefixes when used as source and destination. This issue affects MX Series devices using MS-MPC, MS-MIC or MS-SPC3 service cards with IDS service configured. This issue affects: Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S10 on MX Series; 17.4 versions prior to 17.4R3-S3 on MX Series; 18.1 versions prior to 18.1R3-S11 on MX Series; 18.2 versions prior to 18.2R3-S6 on MX Series; 18.3 versions prior to 18.3R3-S4 on MX Series; 18.4 versions prior to 18.4R3-S6 on MX Series; 19.1 versions prior to 19.1R2-S2, 19.1R3-S3 on MX Series; 19.2 versions prior to 19.2R3-S1 on MX Series; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1 on MX Series; 19.4 versions prior to 19.4R3 on MX Series; 20.1 versions prior to 20.1R2 on MX Series; 20.2 versions prior to 20.2R2 on MX Series;

• CWE-284

• https://kb.juniper.net/JSA11095Vendor Advisory
• https://kb.juniper.net/JSA11095Vendor Advisory

Published

Jan 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0198Improper access control in the firmware for the Intel(R) Eth…4.4
• CVE-2021-0199Improper input validation in the firmware for the Intel(R) E…4.4
• CVE-2021-0200Out-of-bounds write in the firmware for Intel(R) Ethernet 70…6.7
• CVE-2021-0202On Juniper Networks MX Series and EX9200 Series platforms wi…7.5
• CVE-2021-0203On Juniper Networks EX and QFX5K Series platforms configured…8.6
• CVE-2021-0204A sensitive information disclosure vulnerability in delta-ex…7.8
• CVE-2021-0206A NULL Pointer Dereference vulnerability in Juniper Networks…7.5
• CVE-2021-0207An improper interpretation conflict of certain data between …7.5
• CVE-2021-0208An improper input validation vulnerability in the Routing Pr…8.8
• CVE-2021-0209In Juniper Networks Junos OS Evolved an attacker sending cer…6.5
• CVE-2021-0210An Information Exposure vulnerability in J-Web of Juniper Ne…6.8
• CVE-2021-0211An improper check for unusual or exceptional conditions in J…10