Is CVE-2020-1614 actively exploited?

No active exploitation of CVE-2020-1614 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-1614 be exploited remotely?

Yes. CVE-2020-1614 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2020-1614?

CVE-2020-1614 has a CVSS score of 10.0 (CRITICAL).

HOME VULNERABILITIESCVE-2020-1614

CRITICAL

CVE-2020-1614

CWE-798Published: April 8, 2020· Updated: Jun 17, 2026

10.0

CVSS v3.1

Official Description

A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF) instance, which allows an attacker to take control of the vSRX VNF instance if they have the ability to access an administrative service (e.g. SSH) on the VNF, either locally, or through the network. This issue only affects the NFX250 Series vSRX VNF. No other products or platforms are affected. This issue is only applicable to environments where the vSRX VNF root password has not been configured. This issue affects the Juniper Networks NFX250 Network Services Platform vSRX VNF instance on versions prior to 19.2R1.

NVD Source

Technical Analysis

CVE-2020-1614 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 10.0.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.