CVE-2004-1766: The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for...

Security readout for executives and security teams

NetScreen-Security Manager installations before Feature Pack 1 could communicate with ScreenOS 5.0 devices without encryption by default. Someone able to sniff that management traffic could read sensitive information. The source bundle does not provide CVSS, confirmed exploitation, or detailed impact beyond information disclosure. Exposure is likely limited to legacy environments still running NetScreen-Security Manager before Feature Pack 1 with ScreenOS 5.0 devices, especially where management traffic crosses shared, routed, or untrusted networks. Prioritize this if legacy NetScreen management still exists. The business risk is sensitive network-management information exposed through unencrypted traffic, but urgency is constrained by age, unclear severity, and no cited active exploitation. Mitigation focus: Check Juniper or NetScreen guidance for Feature Pack 1 remediation details.; Upgrade NetScreen-Security Manager if the vendor advisory confirms the affected version.; Enable encrypted manager-to-device communications where supported..

Prepared

Jun 29, 2026, 23:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.