Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026041002042323 | Publication Time | 2026/04/10 14:33 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026/04/10 14:33 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】 A Critical Security Vulnerability Exists in Juniper Networks CTP OS (CVE-2026-33771) |
|||
| [Content] Forwarded from TWCERTCC-200-202604-00000009 Juniper Networks CTP OS contains a critical security vulnerability (CVE-2026-33771, CVSS 4.x: 9.1). This is a Weak Password Requirements vulnerability that may allow an unauthenticated network attacker to gain control of the device by exploiting the weak password of a local account. (Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform]
Juniper Networks CTP OS versions 9.2R1 and 9.2R2 |
|||
| [Recommended Actions]
Please update to Juniper Networks CTP OS version 9.3R1 or later (inclusive). |
|||
| [Reference] https://www.twcert.org.tw/tw/cp-169-10829-d8f35-1.html |
|||