Threat Investigation
Request a demo

CVE-2021-0248

Critical

Description

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Juniper Networks Junos OS versions prior to 19.1R1 on NFX Series. No other platforms besides NFX Series devices are affected.

SeverityCritical
CVSS10.0
Exploit probability—
ProductJuniper Junos
PublishedApr 22, 2021
First seenApr 22, 2021
Weakness typeCWE-798Hard-coded credentials

How to fix

Update
  • juniper junos19.1 or later

Affected products

ProductAffected versionsFixed in
juniper junosv < 19.1, 19.119.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.