CVE-2021-0266CWE-321

cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.

High · published April 22, 2021

CVSS v3.1
8.1
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00880 · 58.7th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2021-04-22T19:37Z
EPSS history
Timeline
  • 22 APR 19:37Z
    cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.
    cvelistv5