Juniper Networks says it has conducted an in-depth review of ScreenOS as well as its Junos OS firmware. The U.S. networking giant has promised to eliminate the vulnerability and moved to reassure customers that its products are now safe to use. But Juniper has yet to answer some tough questions about how ScreenOS ended up with three separate vulnerabilities. A team of leading cryptographers reviewed 48 versions of the ScreenOS firmware, and found that in late 2008 or early 2009, the company added “Dual_EC_DRBG” to ScreenOS.”]
Source: https://www.bankinfosecurity.com/juniper-firmware-new-crypto-flaw-found-a-8790