2 lines
4.6 KiB
JSON
2 lines
4.6 KiB
JSON
{"affected":[{"affectedData":[{"platforms":["cSRX Series"],"product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"20.2R3","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"20.3R2","status":"affected","version":"20.3","versionType":"custom"},{"lessThan":"20.4R2","status":"affected","version":"20.4","versionType":"custom"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*","matchCriteriaId":"CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*","matchCriteriaId":"D3C23AEB-34DE-44FB-8D64-E69D6E8B7401","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*","matchCriteriaId":"18DB9401-5A51-4BB3-AC2F-58F58F1C788C","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*","matchCriteriaId":"06F53DA5-59AE-403C-9B1E-41CE267D8BB1","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*","matchCriteriaId":"5C9BC697-C7C9-447D-9EBD-E9711462583E","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*","matchCriteriaId":"7B80433B-57B1-49EF-B1A1-83781D6102E3","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*","matchCriteriaId":"20DDC6B7-BFC4-4F0B-8E68-442C23765BF2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*","matchCriteriaId":"037BA01C-3F5C-4503-A633-71765E9EF774","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*","matchCriteriaId":"11D4A86D-BDB4-4A01-96FE-7E023C58074B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2."},{"lang":"es","value":"El uso de múltiples claves criptográficas embebidas en el software de la serie cSRX en Juniper Networks Junos OS, permite a un atacante tomar el control de cualquier instancia de una implementación de cSRX a través de servicios de administración de dispositivos. Este problema afecta a: Juniper Networks Junos OS en la serie cSRX: todas las versiones anteriores a 20.2R3; 20.3 versiones anteriores a 20.3R2; versiones 20.4 anteriores a 20.4R2"}],"id":"CVE-2021-0266","lastModified":"2026-06-17T03:29:39.450","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"sirt@juniper.net","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-04-22T20:15:09.877","references":[{"source":"sirt@juniper.net","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA11157"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA11157"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-321"}],"source":"sirt@juniper.net","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-798"}],"source":"nvd@nist.gov","type":"Primary"}]}
|