CVE-2026-33771

The CTP OS system administrator can set password complexity requirements through a dedicated menu, however, the configured settings are not permanently saved. In practice, this means these requirements are not enforced — users can set arbitrarily simple passwords for local accounts. A remote attacker, without any authentication, can exploit this weakness to conduct brute-force or dictionary attacks on local accounts, significantly increasing the chance of gaining unauthorized access. The status of current password requirements can be verified using the menu option 'Show password requirements'.

Successful exploitation of the vulnerability may allow an attacker to gain unauthorized access to local device accounts and, as a result, to take full control of the CTP OS device.

Apply patches available from the vendor in accordance with the references (https://kb.juniper.net/JSA107864). Until the fix is implemented, it is recommended to manually enforce a strong password policy for all local accounts and restrict network access to device management interfaces.

Juniper Networks CTP OS in versions 9.2R1 and 9.2R2.