Skip to content
OpenAdvisories
Critical · 10.0 CVE-2021-0248 EUVD-2021-2867GHSA-466r-grw5-cc98

NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.

Published Apr 22, 2021 · Updated Sep 16, 2024 · Assigned by juniper

Description

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Juniper Networks Junos OS versions prior to 19.1R1 on NFX Series. No other platforms besides NFX Series devices are affected.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS unspecified – < 19.1R1 19.1R1

References