CVE-2021-0218

A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges to execute commands with root privilege. license-check is a daemon used to manage licenses in Junos OS. To update licenses, a user executes the command 'request system license update' via the CLI. An attacker with access to this CLI command may be able to exploit the vulnerability. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2.

• CWE-78
• CWE-78

• https://kb.juniper.net/JSA11108Vendor Advisory
• https://kb.juniper.net/JSA11108Vendor Advisory

Published

Jan 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0211An improper check for unusual or exceptional conditions in J…10
• CVE-2021-0212An Information Exposure vulnerability in Juniper Networks Co…5
• CVE-2021-0214A vulnerability in the distributed or centralized periodic p…6.5
• CVE-2021-0215On Juniper Networks Junos EX series, QFX Series, MX Series a…6.5
• CVE-2021-0216A vulnerability in Juniper Networks Junos OS running on the …6.5
• CVE-2021-0217A vulnerability in processing of certain DHCP packets from a…7.4
• CVE-2021-0219A command injection vulnerability in install package validat…6.7
• CVE-2021-0220The Junos Space Network Management Platform has been found t…6.8
• CVE-2021-0221In an EVPN/VXLAN scenario, if an IRB interface with a virtua…6.5
• CVE-2021-0222A vulnerability in Juniper Networks Junos OS allows an attac…7.4
• CVE-2021-0223A local privilege escalation vulnerability in telnetd.real o…7.8
• CVE-2021-0224A vulnerability in the handling of internal resources necess…6.5