Multiple vulnerabilities have been resolved in Juniper Networks SRC Series by updating third party components included with SRC Series or by fixing vulnerabilities found during internal testing.

These issues affect:

Juniper Networks SRC Series

• All versions prior to 4.12.0R5;
• 4.13.0 versions prior to 4.13.0R3.

Juniper SIRT is not aware of any malicious exploitation of these vulnerabilities.

These issues were found during internal product security testing or research.

Important security issues resolved include:

The following software releases have been updated to resolve these specific issues: SRC Series 4.12.0R5, 4.13.0R3, and all subsequent releases.

These issues are being tracked as  1487222  and  1487223 .

Software releases or updates are available for download at https://support.juniper.net/support/downloads/

There are no viable workarounds for these issues.

To reduce the risk of exploitation utilize common security BCPs to limit the exploitable surface by limiting access to network and device to trusted systems, administrators, networks and hosts.

2021-10-13: Initial Publication.

• KB16613: Overview of the Juniper Networks SIRT Quarterly Security Bulletin Publication Process [juniper.net]
• KB16765: In which releases are vulnerabilities fixed? [juniper.net]
• KB16446: Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories [juniper.net]
• Report a Vulnerability - How to Contact the Juniper Networks Security Incident Response Team
• CVE-2021-31380 at cve.mitre.org
• CVE-2021-31381 at cve.mitre.org