Juniper Networks has issued a warning after discovering “unauthorized code” in its firewall software.
Analysis of the fake code shows it can decrypt encrypted data sent over virtual private networks. In a security advisory, the internet hardware maker said that whoever wrote the code could use it to spy on encrypted conversations.
Juniper has released patches to remove it from its firewall software and urged customers to apply them.
No data available
The code was found in Juniper ScreenOS software, with which many large enterprises that use its hardware monitor data traffic entering and exiting their networks.
Juniper routers and network switches are widely used in ISPs and by many large enterprises.
An internal code review revealed that ScreenOS was hosting the unwanted “passenger,” the company said. No information was provided about where the code came from or how it found its way into core firewall software
The range of products affected shows that the extra software was hidden within different versions of ScreenOS since 2012..
Juniper added that it had no evidence that the vulnerabilities created by the code were exploitable.
He said he took the issue “very seriously” and software patches were quickly produced to remove the fake code.
“We recommend that all of our customers update their systems and apply these patches as soon as possible,” said Bob Worrall, Juniper’s chief information officer.
In a separate announcement, Juniper provided more details about what could happen if the unauthorized code was used. One part gives attackers remote access to a device and allows them to hide any evidence of tampering.
Another allows an attacker to remove the encryption that many businesses use to protect communications between staff.
