CVE-2021-0245

A Use of Hard-coded Credentials vulnerability in Juniper Networks Junos OS on Junos Fusion satellite devices allows an attacker who is local to the device to elevate their privileges and take control of the device. This issue affects: Juniper Networks Junos OS Junos Fusion Satellite Devices. 16.1 versions prior to 16.1R7-S7; 17.1 versions prior to 17.1R2-S12, 17.1R3-S2; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10; 17.4 version 17.4R3 and later versions; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S6, 18.4R2-S4, 18.4R3-S1; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S4, 19.2R2; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2; 20.1 versions prior to 20.1R1-S1, 20.1R2. This issue does not affected Junos OS releases prior to 16.1R1 or all 19.2R3 and 19.4R3 release versions.

• CWE-798
• CWE-798

• https://kb.juniper.net/JSA11138Vendor Advisory
• https://kb.juniper.net/JSA11138Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0239In Juniper Networks Junos OS Evolved, receipt of a stream of…6.5
• CVE-2021-0240On Juniper Networks Junos OS platforms configured as DHCPv6 …6.5
• CVE-2021-0241On Juniper Networks Junos OS platforms configured as DHCPv6 …6.5
• CVE-2021-0242A vulnerability due to the improper handling of direct memor…6.5
• CVE-2021-0243Improper Handling of Unexpected Data in the firewall policer…4.7
• CVE-2021-0244A signal handler race condition exists in the Layer 2 Addres…7.4
• CVE-2021-0246On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with S…7.3
• CVE-2021-0247A Race Condition (Concurrent Execution using Shared Resource…5.5
• CVE-2021-0248This issue is not applicable to NFX NextGen Software. On NFX…10
• CVE-2021-0249On SRX Series devices configured with UTM services a buffer …9.8
• CVE-2021-0250In segment routing traffic engineering (SRTE) environments w…7.5
• CVE-2021-0251A NULL Pointer Dereference vulnerability in the Captive Port…8.6