Description (CNA)
The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Juniper Networks / Junos OS | affected unspecified before 20.2R3; affected 20.3 before 20.3R2; affected 20.4 before 20.4R2 |
CWE
CWE-321
References
ADP enrichment
No English description supplied.