Juniper Networks SRX345/SRX345-DUAL-AC with Junos 15.1X49-D110
Juniper Networks, Inc. - FIPS 140 #3247
The Juniper Networks SRX Series Services Gateways are a series of secure routers that provide essential capabilities to connect, secure, and manage work force locations sized from handfuls to hundreds of users. By consolidating fast, highly available switching, routing, security, and applications capabilities in a single device, enterprises can economically deliver new services, safe connectivity, and a satisfying end user experience.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3247
- Standard
- FIPS 140-2
- Security level
- Level 2
- Status
- historical
- Status reason
- SP 800-56Arev3 transition
- Vendor
- Juniper Networks, Inc.
- Module type
- Hardware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- BAE SYSTEMS APPLIED INTELLIGENCE
- First validated
- July 25, 2018
- Versions
- SRX345, SRX345-DUAL-AC with JNPR-FIPS-TAMPER-LBLS; JUNOS-FIPS-MODE 15.1X49-D110
- Caveat
- When operated in FIPS mode and with tamper-evident seals installed as indicated in the Security Policy
- Level exceptions
- Design Assurance: Level 3; Mitigation of Other Attacks: N/A; Roles, Services, and Authentication: Level 3
Algorithms
- AES
- CVL
- DRBG
- ECDSA
- HMAC
- KTS
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (24)
- AES 4941
- AES 4942
- AES 4943
- CVL 1542
- CVL 1543
- DRBG 1770
- ECDSA 1264
- ECDSA 1267
- HMAC 3289
- HMAC 3290
- HMAC 3291
- KTS 2568
- KTS 2570
- KTS 3289
- KTS 3291
- RSA 2688
- RSA 2693
- SHS 4030
- SHS 4031
- SHS 4032
- SHS 4033
- Triple-DES 2568
- Triple-DES 2569
- Triple-DES 2570
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
CVEs that may affect this product
- CVE-2020-1631HIGH 8.8KEVEPSS 4.8%
- CVE-2025-21590MEDIUM 4.4KEVEPSS 1.7%
- CVE-2024-21591CRITICAL 9.8EPSS 17.7%
- CVE-2020-10188CRITICAL 9.8EPSS 74.3%
- CVE-2019-0036CRITICAL 9.8EPSS 1.0%
- CVE-2017-2345CRITICAL 9.8EPSS 3.6%
- CVE-2015-5362HIGH 9.3EPSS 3.8%
- CVE-2021-31372HIGH 8.8EPSS 1.2%
- CVE-2020-1656HIGH 8.8EPSS 1.1%
- CVE-2020-1609HIGH 8.8EPSS 0.9%
- CVE-2020-1605HIGH 8.8EPSS 0.8%
- CVE-2019-0047HIGH 8.8EPSS 1.6%
- CVE-2018-0021HIGH 8.8EPSS 0.6%
- CVE-2016-1264HIGH 8.8EPSS 1.7%
- CVE-2023-44194HIGH 8.4EPSS 0.2%
- CVE-2016-4922HIGH 8.4EPSS 0.5%
- CVE-2022-22241HIGH 8.1EPSS 1.3%
- CVE-2019-0039HIGH 8.1EPSS 1.3%
- CVE-2022-22181HIGH 8.0EPSS 0.7%
- CVE-2021-31355HIGH 8.0EPSS 0.8%
- CVE-2026-33793HIGH 7.8EPSS 0.2%
- CVE-2019-0061HIGH 7.8EPSS 0.4%
- CVE-2019-0053HIGH 7.8EPSS 0.6%
- CVE-2017-2344HIGH 7.8EPSS 0.5%
- CVE-2015-7752HIGH 7.8EPSS 1.9%
- CVE-2014-6450HIGH 7.8EPSS 1.9%
- CVE-2025-60003HIGH 7.5EPSS 0.4%
- CVE-2025-52946HIGH 7.5EPSS 0.5%
- CVE-2025-30651HIGH 7.5EPSS 0.4%
- CVE-2024-47499HIGH 7.5EPSS 0.6%
- CVE-2024-39564HIGH 7.5EPSS 0.4%
- CVE-2024-39555HIGH 7.5EPSS 0.5%
- CVE-2024-39552HIGH 7.5EPSS 0.6%
- CVE-2024-39549HIGH 7.5EPSS 0.5%
- CVE-2024-39525HIGH 7.5EPSS 0.4%
- CVE-2024-39516HIGH 7.5EPSS 0.4%
- CVE-2024-39515HIGH 7.5EPSS 0.5%
- CVE-2024-30397HIGH 7.5EPSS 0.3%
- CVE-2024-30395HIGH 7.5EPSS 0.5%
- CVE-2024-30394HIGH 7.5EPSS 0.7%
- CVE-2024-30382HIGH 7.5EPSS 0.7%
- CVE-2023-4481HIGH 7.5EPSS 18.4%
- CVE-2023-44197HIGH 7.5EPSS 0.6%
- CVE-2023-44186HIGH 7.5EPSS 0.6%
- CVE-2023-44185HIGH 7.5EPSS 0.6%
- CVE-2023-36843HIGH 7.5EPSS 0.7%
- CVE-2023-36841HIGH 7.5EPSS 0.6%
- CVE-2023-28964HIGH 7.5EPSS 0.6%
- CVE-2023-22391HIGH 7.5EPSS 0.6%
- CVE-2023-0026HIGH 7.5EPSS 0.6%
and 126 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain