A Use of Hard-coded Credentials vulnerability in Juniper Networks Junos OS on Junos Fusion satellite devices allows an attacker who is local to the device to elevate their privileges and take control of the device. This issue affects: Juniper Networks Junos OS Junos Fusion Satellite Devices. 16.1 versions prior to 16.1R7-S7; 17.1 versions prior to 17.1R2-S12, 17.1R3-S2; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10; 17.4 version 17.4R3 and later versions; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S6, 18.4R2-S4, 18.4R3-S1; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S4, 19.2R
The following software releases have been updated to resolve this specific issue: Junos OS: 16.1R7-S7, 17.1R2-S12, 17.1R3-S2, 17.2R3-S4, 17.3R3-S8, 17.4R2-S10, 18.1R3-S10, 18.2R2-S7, 18.2R3-S3, 18.3R1-S7, 18.3R2-S4, 18.3R3-S2, 18.4R1-S6, 18.4R2-S4, 18.4R3-S1, 19.1R1-S5, 19.1R2-S1, 19.1R3, 19.2R1-S4, 19.2R2, 19.3R2-S5, 19.3R3, 19.4R1-S1, 19.4R2, 20.1R1-S1, 20.1R2, 20.2R1, and all subsequent releases.
There are no viable workarounds for this issue. To reduce the risk of exploitation of this issue, use access lists or firewall filters to limit access to only trusted administrative networks, hosts and users.
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| Juniper Networks Junos OS | >=16.1<16.1R7-S7 | 16.1R7-S7 | advisory ↗ |
| Juniper Networks Junos OS | >=17.1<17.1R2-S12, 17.1R3-S2 | 17.1R2-S12, 17.1R3-S2 | advisory ↗ |
| Juniper Networks Junos OS | >=17.2<17.2R3-S4 | 17.2R3-S4 | advisory ↗ |
| Juniper Networks Junos OS | >=17.3<17.3R3-S8 | 17.3R3-S8 | advisory ↗ |
| Juniper Networks Junos OS | >=17.4<17.4R2-S10 | 17.4R2-S10 | advisory ↗ |
| Juniper Networks Junos OS | >=18.1<18.1R3-S10 | 18.1R3-S10 | advisory ↗ |
| Juniper Networks Junos OS | >=18.2<18.2R2-S7, 18.2R3-S3 | 18.2R2-S7, 18.2R3-S3 | advisory ↗ |
| Juniper Networks Junos OS | >=18.3<18.3R1-S7, 18.3R2-S4, 18.3R3-S2 | 18.3R1-S7, 18.3R2-S4, 18.3R3-S2 | advisory ↗ |
| Juniper Networks Junos OS | >=18.4<18.4R1-S6, 18.4R2-S4, 18.4R3-S1 | 18.4R1-S6, 18.4R2-S4, 18.4R3-S1 | advisory ↗ |
| Juniper Networks Junos OS | >=19.1<19.1R1-S5, 19.1R2-S1, 19.1R3 | 19.1R1-S5, 19.1R2-S1, 19.1R3 | advisory ↗ |
| Juniper Networks Junos OS | >=19.2<19.2R1-S4, 19.2R2 | 19.2R1-S4, 19.2R2 | advisory ↗ |
| Juniper Networks Junos OS | >=19.3<19.3R2-S5, 19.3R3 | 19.3R2-S5, 19.3R3 | advisory ↗ |
| Juniper Networks Junos OS | >=19.4<19.4R1-S1, 19.4R2 | 19.4R1-S1, 19.4R2 | advisory ↗ |
| Juniper Networks Junos OS | >=20.1<20.1R1-S1, 20.1R2 | 20.1R1-S1, 20.1R2 | advisory ↗ |