CVE-2021-31350

CVE-2021-31350 is an Improper Privilege Management vulnerability in the gRPC framework used by the Juniper Extension Toolkit (JET) API on Juniper Networks Junos OS and Junos OS Evolved. This flaw allows a low-privileged, authenticated network attacker to execute operations as root, leading to a complete system compromise. The vulnerability affects numerous Junos OS versions from 18.4 to 20.4, and all Junos OS Evolved versions prior to 20.4R2-EVO and 21.1R2-EVO. Rated with a CVSS score of 8.8 (High), the vulnerability has a network attack vector and low attack complexity, requiring only low privileges and no user interaction. Successful exploitation results in high impacts to confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor is exploit code publicly available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness.