Approved changes feed: RSS · Atom

cpe:2.3:a:juniper_networks:sbr_carrier:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJuniper Networks (75c1b4ad-b137-51c1-bf9a-3bc90c5e98be)
ProductSbr Carrier (eac538db-095f-5aee-b68a-dadfab3154a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-0276 vulnerable 2026-06-03 14:43:26.009366 Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.
CRITICAL (9.8)
A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service (DoS) or leading to remote code execution (RCE). By continuously sending this specific packets, an attacker can repeatedly crash the radius daemon, causing a sustained Denial of Service (DoS). This issue affects Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R19; 8.5.0 versions prior to 8.5.0R10; 8.6.0 versions prior to 8.6.0R4.
Published: 2021-07-15T20:00:45.706Z
Updated: 2024-09-16T19:00:01.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0072 vulnerable 2026-06-03 14:39:16.882596 SBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.
MEDIUM (5.6)
An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. This issue affects: Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R13; 8.5.0 versions prior to 8.5.0R4.
Published: 2019-10-09T19:26:18.073Z
Updated: 2024-09-16T18:56:06.030Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.