Lucene search

K

NorthStar Controller Application Security Vulnerabilities

cve
cve

CVE-2017-2322

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP ports which are normally reserved for other system...

5.5CVSS

7.2AI Score

0.0004EPSS

2017-04-24 06:59 PM
19
cve
cve

CVE-2017-2317

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause denials of services to underlying database tables leading to potential information disclosure,...

8.6CVSS

7AI Score

0.001EPSS

2017-04-24 03:59 PM
20
cve
cve

CVE-2017-2318

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of...

6.5CVSS

7.1AI Score

0.001EPSS

2017-04-24 03:59 PM
27
cve
cve

CVE-2017-2319

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to...

8.3CVSS

7.3AI Score

0.001EPSS

2017-04-24 03:59 PM
30
cve
cve

CVE-2017-2324

A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to cause a denial of service...

5.3CVSS

7.7AI Score

0.001EPSS

2017-04-24 03:59 PM
27
cve
cve

CVE-2017-2328

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unprivileged information stored in the NorthStar...

5.5CVSS

6.7AI Score

0.0004EPSS

2017-04-24 03:59 PM
24
cve
cve

CVE-2017-2332

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the...

8.8CVSS

7.8AI Score

0.003EPSS

2017-04-24 03:59 PM
30
cve
cve

CVE-2017-2333

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network-based, authenticated attacker to consume enough system resources to cause a persistent denial of service by visiting certain...

6.5CVSS

7.1AI Score

0.001EPSS

2017-04-24 03:59 PM
27
cve
cve

CVE-2017-2334

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby stealing authentic credentials from encrypted paths which are easily decrypted,...

7.5CVSS

7.2AI Score

0.002EPSS

2017-04-24 03:59 PM
20
cve
cve

CVE-2017-2323

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server...

7.5CVSS

7.2AI Score

0.001EPSS

2017-04-24 03:59 PM
20
cve
cve

CVE-2017-2326

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

6.5CVSS

6.8AI Score

0.001EPSS

2017-04-24 03:59 PM
26
cve
cve

CVE-2017-2330

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves,...

6.2CVSS

7.3AI Score

0.001EPSS

2017-04-24 03:59 PM
25
cve
cve

CVE-2017-2316

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of...

6.5CVSS

7.6AI Score

0.0004EPSS

2017-04-24 03:59 PM
24
cve
cve

CVE-2017-2320

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the...

10CVSS

7.2AI Score

0.002EPSS

2017-04-24 03:59 PM
20
cve
cve

CVE-2017-2329

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system...

6.2CVSS

7.8AI Score

0.001EPSS

2017-04-24 03:59 PM
18
cve
cve

CVE-2017-2331

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and...

7.3CVSS

7.3AI Score

0.001EPSS

2017-04-24 03:59 PM
20
cve
cve

CVE-2017-2321

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of services, modification of system states and files, and potential....

8.6CVSS

7AI Score

0.001EPSS

2017-04-24 03:59 PM
19
cve
cve

CVE-2017-2325

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of...

6.5CVSS

7.6AI Score

0.001EPSS

2017-04-24 03:59 PM
21
cve
cve

CVE-2017-2327

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to consume large amounts of system resources leading to a cascading denial of...

5.5CVSS

7.1AI Score

0.0004EPSS

2017-04-24 03:59 PM
24