Editing Juniper Networks (section)

== ScreenOS Backdoor ==
In December 2015, Juniper issued an emergency security patch for a [[Backdoor (computing)|backdoor]] in its security equipment.<ref>{{Cite web|last=Evan Perez and Shimon Prokupecz|date=2015-12-18|title=Newly discovered hack has U.S. fearing foreign infiltration - CNNPolitics|url=https://www.cnn.com/2015/12/18/politics/juniper-networks-us-government-security-hack/index.html|access-date=2020-11-02|website=[[CNN]]}}</ref> Together with another vulnerability it allowed to bypass authentication and decrypt [[VPN]] traffic on [[ScreenOS]].<ref>{{Cite web|date=2015-12-20|title=CVE-2015-7755: Juniper ScreenOS Authentication Backdoor|url=https://blog.rapid7.com/2015/12/20/cve-2015-7755-juniper-screenos-authentication-backdoor/|access-date=2020-11-02|website=Rapid7 Blog|language=en}}</ref> Analysis showed that the mechanism of the backdoor was created by the [[NSA]], but might later have been taken over by an unnamed national government.<ref>{{Cite web|title=ImperialViolet - Juniper: recording some Twitter conversations|url=https://www.imperialviolet.org/2015/12/19/juniper.html|access-date=2020-11-02|website=www.imperialviolet.org}}</ref><ref>{{Cite news|last=Menn|first=Joseph|date=2020-10-28|title=Spy agency ducks questions about 'back doors' in tech products|language=en|work=Reuters|url=https://www.reuters.com/article/us-usa-security-congress-insight-idUSKBN27D1CS|access-date=2020-11-02}}</ref><ref>{{Cite news|last=Marks|first=Joseph|date=2020-06-11|title=The Cybersecurity 202: Two new developments challenge Justice Department arguments on encryption|url=https://www.washingtonpost.com/news/powerpost/paloma/the-cybersecurity-202/2020/06/11/the-cybersecurity-202-two-new-developments-challenge-justice-department-arguments-on-encryption/5ee17cdd88e0fa32f8237da5/|access-date=2020-11-02|newspaper=[[Washington Post]]}}</ref>