CVE-2021-0294

A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configured, can lead to the enhanced storm control filter group not be installed. It will cause storm control not to work hence allowing an attacker to cause high CPU usage or packet loss issues by sending a large amount of broadcast or unknown unicast packets arriving the device. This issue affects Juniper Networks QFX5100, QFX5110, QFX5120, QFX5200, QFX5210, EX4600, and EX4650, and QFX5100 with QFX 5e Series image installed. QFX5130 and QFX5220 are not affected from this issue. This issue affects Juniper Networks Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series. No other product or platform is affected by this vulnerability.

• CWE-474

• https://kb.juniper.net/JSA11196Vendor Advisory
• https://kb.juniper.net/JSA11196Vendor Advisory

Published

Jul 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0288A vulnerability in the processing of specific MPLS packets i…6.5
• CVE-2021-0289When user-defined ARP Policer is configured and applied on o…5.3
• CVE-2021-0290Improper Handling of Exceptional Conditions in Ethernet inte…6.5
• CVE-2021-0291An Exposure of System Data vulnerability in Juniper Networks…6.5
• CVE-2021-0292An Uncontrolled Resource Consumption vulnerability in the AR…6.5
• CVE-2021-0293A vulnerability in Juniper Networks Junos OS caused by Missi…5.5
• CVE-2021-0295A vulnerability in the Distance Vector Multicast Routing Pro…6.1
• CVE-2021-0296The Juniper Networks CTPView server is not enforcing HTTP St…7.4
• CVE-2021-0297A vulnerability in the processing of TCP MD5 authentication …6.5
• CVE-2021-0298A Race Condition in the 'show chassis pic' command in Junipe…4.7
• CVE-2021-0299An Improper Handling of Exceptional Conditions vulnerability…7.5
• CVE-2021-0301In ged, there is a possible out of bounds write due to a mis…6.7