CVE-2021-0295

CVE-2021-0295 is a partial Denial of Service vulnerability affecting Juniper Networks Junos OS on QFX10K Series switches. Specifically, it impacts QFX10002, QFX10008, and QFX10016 models running various Junos OS versions. The vulnerability arises from a packet forwarding loop in the Distance Vector Multicast Routing Protocol (DVMRP) when VXLAN is configured on a multi-homed Ethernet Segment Identifier (ESI), violating the split horizon rule. The vulnerability has a CVSS v3.1 score of 6.1 (Medium), indicating it can be exploited by an adjacent attacker with low attack complexity and no user interaction, leading to a partial denial of service. The EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are also minimal, indicating a lack of widespread attention or exploitation.