Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2021-0266

cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

  • unspecified to < 20.2R3affected
  • 20.3 to < 20.3R2affected
  • 20.4 to < 20.4R2affected

References