CVE-2021-0248 - CVE House
Back to Database
Status published Critical CVE-2021-0248

NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.

Vulnerability Description

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Juniper Networks Junos OS versions prior to 19.1R1 on NFX Series. No other platforms besides NFX Series devices are affected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-0248

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Juniper Networks

View all reports →

Affected Software

Junos OS
Vulnerable Versions:
unspecified

Timeline

Official Publish: April 22nd, 2021
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)