CVE-2015-7756

The U.S. House Oversight and Government Reform Committee is probing US Government Agencies over use of backdoored Juniper equipment. A number of US Government Agencies are concerned about the use of Juniper firewalls affected by the recently uncovered backdoor. The U.S. House Oversight and Government Reform Committee has sent letters to dozens of government agencies and departments asking […]

The U.S. House Oversight and Government Reform Committee has sent out letters to dozens of government agencies asking them about the use and patching of vulnerable Juniper Networks products.

The owners of more than 1,500 Juniper Networks firewalls still haven’t applied patches designed to address recently discovered backdoors, an Internet scan conducted by a researcher has shown.

A honeypot set up by researchers at the SANS institute has shown that hackers have already attempted to exploit the Juniper backdoor. Shortly after Juniper posted the advisory related to the presence of unauthorized code in the OS of some of its Firewalls, HD Moore, the developer of the Rapid7′ Metasploit Framework, revealed that approximately 26,000 […]

A honeypot set up by researchers has shown that attackers have already attempted to exploit a recently disclosed vulnerability that can be used to gain administrative access to Juniper Networks’ NetScreen firewalls.

SANS Institute’s Internet Storm Center has raised its infocon status – the status of the condition of the Internet infrastructure – from green to yellow, following the public revelation of two backdoors in Juniper’s NetScreen firewall devices, and the publication of the password that allows easy exploitation of one of them. SANS ISC CTO Johannes Ullrich added two more reasons behind this decision: “Juniper devices are popular, and many organizations depend on them to defend … More →

Who planted the Authentication Backdoor in the Juniper ScreenOS? Security experts are making their speculation, but interesting revelations are coming out. While the FBI is investigating the case searching for responsible for the introduction of a backdoor in a number of Juniper network devices, a number of speculation are circulating on the Internet. Juniper Networks is a […]

Who put the recently discovered “unauthorized code” in ScreenOS, which effectively opened a backdoor in Juniper’s NetScreen firewall devices and allowed attackers to decrypt VPN connections? Speculations abound, and all currently point to a state-sponsored intruder. Was it China? NetScreen Technologies, the company that created the aforementioned appliances and that was acquired by Juniper Networks in 2004, was founded by Chinese nationals. As Simon Sharwood pointed out, “it’s not hard to find evidence of ongoing … More →

Security experts have been analyzing the Juniper Networks firewall backdoors whose existence was brought to light last week, and they’ve discovered what appears to be the root cause for both the administrative access and VPN decryption issues.

Networking and security company Juniper Networks revealed on Thursday that it has identified a couple of serious vulnerabilities that can be exploited to gain administrative access to some firewalls and decrypt VPN traffic.