← voltar
CVE-2021-0248

NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.

CVSS 10 CRITICALEPSS 1.0%CWE-798
Vexday Risk Score
28Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 10EPSS 1.0%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
22 abr 2021Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Juniper Networks Junos OS versions prior to 19.1R1 on NFX Series. No other platforms besides NFX Series devices are affected.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →