PT-2026-31797 · Juniper Networks · Ctp Os

Published 2026-04-09 · Updated 2026-04-10 · CVE-2026-33771

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks CTP OS versions 9.2R1 and 9.2R2

Description A Weak Password Requirements issue in the password management function may allow an unauthenticated, network-based attacker to exploit weak passwords of local accounts and potentially take full control of the device. The password management menu allows administrators to set password complexity requirements, but these settings are not saved. This can lead to weak passwords being used, increasing the likelihood of unauthorized access.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2026-33771

Affected Products

Ctp Os

References · 4

• https://kb.juniper.net/JSA107864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33771 · Security Note
• https://twitter.com/CVEnew/status/2042364296546426985 · Twitter Post
• https://twitter.com/CCBalert/status/2042603173957796192 · Twitter Post