CVE-2020-1614

A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF) instance, which allows an attacker to take control of the vSRX VNF instance if they have the ability to access an administrative service (e.g. SSH) on the VNF, either locally, or through the network. This issue only affects the NFX250 Series vSRX VNF. No other products or platforms are affected. This issue is only applicable to environments where the vSRX VNF root password has not been configured. This issue affects the Juniper Networks NFX250 Network Services Platform vSRX VNF instance on versions prior to 19.2R1.

• CWE-798
• CWE-798

• https://kb.juniper.net/JSA10997Vendor Advisory
• https://www.juniper.net/documentation/en_US/release-independent/junos/topics/task/configuration/nfx250-configure-vsrx-internal-ip.htmlVendor Advisory
• https://kb.juniper.net/JSA10997Vendor Advisory
• https://www.juniper.net/documentation/en_US/release-independent/junos/topics/task/configuration/nfx250-configure-vsrx-internal-ip.htmlVendor Advisory

Published

Apr 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16134An issue was discovered on Swisscom Internet Box 2, Internet…8
• CVE-2020-16135libssh 0.9.4 has a NULL pointer dereference in tftpserver.c …5.9
• CVE-2020-16136In tgstation-server 4.4.0 and 4.4.1, an authenticated user w…7.7
• CVE-2020-16137A privilege escalation issue in Cisco Unified IP Conference …9.8
• CVE-2020-16138A denial-of-service issue in Cisco Unified IP Conference Sta…7.5
• CVE-2020-16139A denial-of-service in Cisco Unified IP Conference Station 7…7.5
• CVE-2020-16140The search functionality of the Greenmart theme 2.4.2 for Wo…6.1
• CVE-2020-16142On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehic…3.5
• CVE-2020-16143The seafile-client client 7.0.8 for Seafile is vulnerable to…7.8
• CVE-2020-16144When using an object storage like S3 as the file store, when…5.7
• CVE-2020-16145Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS …6.1
• CVE-2020-16146Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.…7.5