EUVD-2026-21193
GHSA-p36j-9x33-56jq
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAccess CTP OS password management menu
-
DeliveryConfigure weak password requirements
-
ExploitSettings fail to persist
-
ExecutionBrute force local account credentials
-
ImpactGain administrative access to device
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Password strength requirements
|
| Exploitation Conditions | Juniper Networks CTP OS with password complexity requirements disabled or not enforced due to settings not persisting. Attacker performs network-based brute force or dictionary attacks against local accounts using weak passwords. No authentication required initially; requires time-based attack (AT:P). Admin must have failed to enforce password complexity via the password management menu. |
| Impact | Critical severity driven by unauthenticated network access to full device compromise (CVSS 9.1). Weak password enforcement on administrative accounts creates trivial brute-force pathway. Real-world impact depends on CTP OS deployment prevalence and password policy awareness among operators. No public exploit identified at time of analysis, but vulnerability requires only network access and low complexity attack. |
| Exploit ScenarioDerived | Attacker performs unauthenticated network-based password enumeration/brute-force against CTP OS 9.2R1/9.2R2 admin accounts. Weak password requirements not enforced despite menu settings, enabling rapid credential compromise. Attacker gains full device control via successful login with guessed weak password. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 09, 2026
Juniper Networks CTP OS 9.2R1 and 9.2R2 fail to persist password complexity settings, enabling unauthenticated attackers to exploit predictable weak passwords on local accounts. The password management function allows administrators to configure complexity requirements but does not save these configurations, verifiable through 'Show password requirements' menu. This defect permits trivial passwords that attackers can brute-force remotely to gain full device control. No public exploit identified at time of analysis.
RemediationAI
Vendor-released patch details available in Juniper Security Advisory JSA107864 at https://kb.juniper.net/JSA107864 - consult advisory for specific fixed release version and upgrade path. Immediate mitigations: (1) manually audit all local account passwords against organizational complexity policy and force resets for non-compliant credentials; (2) implement network-layer access controls restricting management interface exposure to trusted administrative subnets only; (3) enable multi-factor authentication if supported; (4) deploy intrusion detection monitoring for repeated failed authentication attempts indicating brute-force activity. Verify password requirement persistence post-patching using 'Show password requirements' validation.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-521 (Weak Password Requirements) stems from configuration persistence failure in password policy enforcement code. Settings accepted via administrative interface fail database commit, leaving default null requirements active. CVSS:4.0 vector PR:N confirms unauthenticated remote attack surface. Affects password hash comparison logic vulnerable to dictionary attacks.
Know when Brute Force gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:Y/RE:M
Primary rating from Vendor (juniper) · only source for this CVE.
CVSS VectorVendor: juniper
DescriptionCVE.org
A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exploit weak passwords of local accounts and potentially take full control of the device.
The password management menu enables the administrator to set password complexity requirements, but these settings are not saved. The issue can be verified with the menu option "Show password requirements". Failure to enforce the intended requirements can lead to weak passwords being used, which significantly increases the likelihood that an attacker can guess these and subsequently attain unauthorized access.
This issue affects CTP OS versions 9.2R1 and 9.2R2.
Executive ViewAI
Juniper Networks CTP OS versions 9.2R1 and 9.2R2 contain a critical password management flaw where configured complexity requirements fail to persist, allowing attackers to brute-force weak default credentials and gain full administrative control of affected devices. Organizations running these versions face immediate risk of complete device compromise and lateral network access regardless of intended security policies.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict CTP device management access to trusted internal networks only via firewall rules; (2) Disable remote management protocols if not operationally required; (3) Implement network segmentation to limit lateral movement if device is compromised; (4) Enable comprehensive logging and alerting on all authentication attempts to CTP devices; (5) Manually enforce strong passwords through out-of-band administration and monitor for unauthorized access; (6) Consider temporary decommissioning of affected devices until patch availability is confirmed.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
More in Brute Force
View allRuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address fi
An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity
Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits o
Critical authentication bypass vulnerability in OpenC3 COSMOS v6.0.0 caused by weak password requirements that enable br
QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immedia
I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creatio
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0. Rated critical severity (CVSS 9.8), this
Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20. Rated critical severity (CVSS 9.8)
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Rated critical severity (CVSS 9.8), t
Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 (20181130-16:12) has a Weak password vulnerability. R
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8. Rated critical severity (CVSS 9.8), th
Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2. Rated critical severity (CVSS 9.8), this
Exploit-DB