Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-0266

Опубликовано: 22 апр. 2021
Источник: nvd
CVSS3: 8.1
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*
cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.00408
Низкий

8.1 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-321
CWE-798

Связанные уязвимости

github логотип

GHSA-9frr-8rxx-97f3

CVSS3: 9.8
github
больше 3 лет назад

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2.

EPSS

Процентиль: 61%
0.00408
Низкий

8.1 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-321
CWE-798