PT-2021-12956 · Juniper Networks · Junos
Published
2021-04-22
·
Updated
2021-04-28
·
CVE-2021-0245
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Juniper Networks Junos OS Junos Fusion Satellite Devices versions prior to 16.1R7-S7
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 17.1 prior to 17.1R2-S12, 17.1R3-S2
Juniper Networks Junos OS Junos Fusion Satellite Devices version 17.2 prior to 17.2R3-S4
Juniper Networks Junos OS Junos Fusion Satellite Devices version 17.3 prior to 17.3R3-S8
Juniper Networks Junos OS Junos Fusion Satellite Devices version 17.4 prior to 17.4R2-S10
Juniper Networks Junos OS Junos Fusion Satellite Devices version 18.1 prior to 18.1R3-S10
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 18.2 prior to 18.2R2-S7, 18.2R3-S3
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 18.3 prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S2
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 18.4 prior to 18.4R1-S6, 18.4R2-S4, 18.4R3-S1
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 19.1 prior to 19.1R1-S5, 19.1R2-S1, 19.1R3
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 19.2 prior to 19.2R1-S4, 19.2R2
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 19.3 prior to 19.3R2-S5, 19.3R3
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 19.4 prior to 19.4R1-S1, 19.4R2
Juniper Networks Junos OS Junos Fusion Satellite Devices versions 20.1 prior to 20.1R1-S1, 20.1R2
Description:
A Use of Hard-coded Credentials issue in Juniper Networks Junos OS on Junos Fusion satellite devices allows an attacker who is local to the device to elevate their privileges and take control of the device.
Recommendations:
For versions prior to 16.1R7-S7, update to 16.1R7-S7 or later.
For versions 17.1 prior to 17.1R2-S12, 17.1R3-S2, update to 17.1R2-S12 or 17.1R3-S2 or later.
For version 17.2 prior to 17.2R3-S4, update to 17.2R3-S4 or later.
For version 17.3 prior to 17.3R3-S8, update to 17.3R3-S8 or later.
For version 17.4 prior to 17.4R2-S10, update to 17.4R2-S10 or later.
For version 18.1 prior to 18.1R3-S10, update to 18.1R3-S10 or later.
For versions 18.2 prior to 18.2R2-S7, 18.2R3-S3, update to 18.2R2-S7 or 18.2R3-S3 or later.
For versions 18.3 prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S2, update to 18.3R1-S7 or 18.3R2-S4 or 18.3R3-S2 or later.
For versions 18.4 prior to 18.4R1-S6, 18.4R2-S4, 18.4R3-S1, update to 18.4R1-S6 or 18.4R2-S4 or 18.4R3-S1 or later.
For versions 19.1 prior to 19.1R1-S5, 19.1R2-S1, 19.1R3, update to 19.1R1-S5 or 19.1R2-S1 or 19.1R3 or later.
For versions 19.2 prior to 19.2R1-S4, 19.2R2, update to 19.2R1-S4 or 19.2R2 or later.
For versions 19.3 prior to 19.3R2-S5, 19.3R3, update to 19.3R2-S5 or 19.3R3 or later.
For versions 19.4 prior to 19.4R1-S1, 19.4R2, update to 19.4R1-S1 or 19.4R2 or later.
For versions 20.1 prior to 20.1R1-S1, 20.1R2, update to 20.1R1-S1 or 20.1R2 or later.
Fix
Using Hardcoded Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos