Juniper Networks has announced its intention to remove two flawed cryptographic functions from its software over the next few months. The company will replace Dual_EC and ANSI X9.31 in ScreenOS 6.3 with the same random number generation technology currently employed across our broad portfolio of Junos OS products. The software powers its NetScreen firewall, VPN, and traffic-shaping technology. Juniper Network has not yet commented on how exactly the unauthorized code got into its software code. It is recommended that customers update their ScreenOS to the latest versions and keep an eye out for the upcoming patch.”]
Source: https://grahamcluley.com/juniper-says-remove-flawed-cryptographic-code-software/