CVE-2017-2307

CVE-2017-2307 affects Juniper Networks Junos Space (admin interface) prior to 16.1R1 and is a reflected cross-site scripting vulnerability. The issue can allow remote attackers to steal sensitive information or perform certain administrative actions, with exploitation requiring user interaction. ...

CVE-2017-2308

The CVE-2017-2308 entry affects Juniper Networks Junos Space, with an XML External Entity (XXE) vulnerability in the web management interface. Affected: Junos Space versions prior to 16.1R1. The underlying issue allows an authenticated user to read arbitrary files on the device. Impact: Partial c...

CVE-2017-2309

Affected product: Juniper Networks Junos Space (versions prior to 16.1R1). Vulnerability: Information disclosure due to certificate-based authentication enabling access to restricted web services over the network. Impact: Confidentiality impact is high; information leak risk reported. Status/reme...

CVE-2017-2310

CVE-2017-2310 affects Juniper Networks Junos Space; a firewall bypass vulnerability exists in the host-based firewall for versions prior to 16.1R1 that may permit certain crafted packets, posing a network integrity risk. Exploitation status is not detailed in the provided documents. According to ...

CVE-2017-2311

CVE-2017-2311 affects Juniper Networks Junos Space before version 16.1R1. An unauthenticated remote attacker with network access can trigger a denial-of-service condition on the Junos Space device. The vulnerability is tied to the Junos Space software lineage as described in multiple sources; mit...

PT-2017-15338

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue is related to an insufficient authorization check. On the Junos Space administrative web interface, readonly users can create privileged users, allowing privilege escalation...

PT-2017-15340

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description A reflected cross site scripting issue in the administrative interface may allow remote attackers to steal sensitive information or perform certain administrative actions. Recommendations For...

PT-2017-15342

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue represents an information leak risk due to some restricted web services being accessible over the network when certificate-based authentication is enabled for the Junos Space cluster...

PT-2017-15343

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description A firewall bypass issue in the host-based firewall may allow certain crafted packets to bypass security, posing a risk to network integrity. Recommendations For versions prior to 16.1R1, update ...

PT-2017-15341

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description An XML External Entity Injection issue may allow an authenticated user to read arbitrary files on the device. Recommendations For versions prior to 16.1R1, update to version 16.1R1 or later to...

PT-2017-15337

Name of the Vulnerable Software and Affected Versions Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to 14.1X53-D40 Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to...

PT-2017-2193

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D50 Junos OS versions 12.1X47 prior to 12.1X47-D40 Junos OS versions 12.3 prior to 12.3R13 Junos OS versions 12.3X48 prior to 12.3X48-D30 Junos OS versions 13.2X51 prior to 13.2X51-D40 Junos OS versio...

PT-2017-2194

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D55 Junos OS versions 12.1X47 prior to 12.1X47-D45 Junos OS versions 12.3R13 prior to 12.3R13 Junos OS versions 12.3X48 prior to 12.3X48-D35 Junos OS versions 13.3 prior to 13.3R10 Junos OS versions...

PT-2017-2195

Name of the Vulnerable Software and Affected Versions Junos OS versions 11.4 prior to 11.4R13-S3 Junos OS versions 12.1X46 prior to 12.1X46-D60 Junos OS versions 12.3 prior to 12.3R12-S2 or 12.3R13 Junos OS versions 12.3X48 prior to 12.3X48-D40 Junos OS versions 13.2X51 prior to 13.2X51-D40 Junos...

CVE-2017-2308: Improper Restriction of XML External Entity Reference

An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device...

CVE-2017-2304: Exposure of Sensitive Information to an Unauthorized Actor

Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from...

CVE-2017-2303: Undefined Security Weakness

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to...

CVE-2017-2300: Undefined Security Weakness

On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a...

PT-2017-15339

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue is related to an insufficient authorization check. As a result, readonly users on the Junos Space administrative web interface can execute code on the device. Recommendations For...

PT-2017-15344

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 16.1R1 Description The issue allows an unauthenticated remote attacker with network access to create a denial of service condition. Recommendations For versions prior to 16.1R1, update to version 16.1R1 or later t...