CVE-2021-0248: NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.
This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Juniper Networks Junos OS versions prior to 19.1R1 on NFX Series. No other platforms besides NFX Series devices are affected.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-0248?
CVE-2021-0248 is a vulnerability in Juniper Networks Junos OS that allows an attacker to take over any instance of an NFX deployment by exploiting hard-coded credentials in administrative interfaces.
Which software is affected by CVE-2021-0248?
Juniper JUNOS versions up to and including 19.1 are affected by CVE-2021-0248.
Is NFX NextGen Software affected by CVE-2021-0248?
No, NFX NextGen Software is not affected by CVE-2021-0248.
How severe is CVE-2021-0248?
CVE-2021-0248 has a severity rating of 10 (critical).
How can the CVE-2021-0248 vulnerability be fixed?
To fix CVE-2021-0248, it is recommended to upgrade Juniper JUNOS to a version higher than 19.1.