What’s Vulnerable › Vulnerabilities
CVE-2018-0040: Contrail Service Orchestration: hardcoded cryptographic certificates and keys
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-07-11 · updated 2026-06-17
- Weakness: CWE-321
Description
Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services.
Affected products
- Juniper Networks Contrail Service Orchestration: before 4.0.0 — fixed in 4.0.0
How to fix
Upgrade to a fixed version: Juniper Networks Contrail Service Orchestration 4.0.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2018-0040 or the next vulnerability affects your stack