CVE-2018-0040: Juniper Contrail Service Orchestration

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services.

Affected products

• Juniper Contrail Service Orchestration: before 4.0.0 (fixed in 4.0.0)

Published 2018-07-11. Last modified 2026-06-17.