Juniper screnos bypasses the authentication Backdoor

Juniper screnos bypasses the authentication Backdoor

Two backdoors emerged last week in the system screnos, which runs the Juniper firewall. One backdoor is related to the elliptic curve pseudo-random number generator, allowing attackers to decrypt VPN traffic; the second backdoor allows attackers to bypass SSH and Telnet AUTHENTICATION. The backdoor password is "is <% s" (un = '% s') = % u. It is not found in the old version and only affects screnos 6.3.0r17 and 6.3.0r19, according to the time when the affected version was released, the backdoor password was first added on January 1, 2013. Juniper allows attackers to log on using webshells and passwords.

This article permanently updates the link address: