CVE-2021-0237

On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series deployed as a Virtual Chassis with a specific Layer 2 circuit configuration, Packet Forwarding Engine manager (FXPC) process may crash and restart upon receipt of specific layer 2 frames. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4, 17.4R3-S5; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2, 20.2R3; 20.3 versions prior to 20.3R1-S2, 20.3R2;

• https://kb.juniper.net/JSA11132Vendor Advisory
• https://kb.juniper.net/JSA11132Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0231A path traversal vulnerability in the Juniper Networks SRX a…6.5
• CVE-2021-0232An authentication bypass vulnerability in the Juniper Networ…7.4
• CVE-2021-0233A vulnerability in Juniper Networks Junos OS ACX500 Series, …7.5
• CVE-2021-0234Due to an improper Initialization vulnerability on Juniper N…5.8
• CVE-2021-0235On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with S…7.3
• CVE-2021-0236Due to an improper check for unusual or exceptional conditio…6.5
• CVE-2021-0238When a MX Series is configured as a Broadband Network Gatewa…5.5
• CVE-2021-0239In Juniper Networks Junos OS Evolved, receipt of a stream of…6.5
• CVE-2021-0240On Juniper Networks Junos OS platforms configured as DHCPv6 …6.5
• CVE-2021-0241On Juniper Networks Junos OS platforms configured as DHCPv6 …6.5
• CVE-2021-0242A vulnerability due to the improper handling of direct memor…6.5
• CVE-2021-0243Improper Handling of Unexpected Data in the firewall policer…4.7