CVE-2016-4927

CVE-2016-4927 affects Junos Space (pre-15.2R2). The root cause is insufficient validation of SSH keys during Space-to-managed-device communications, enabling MITM-style attacks. Impact is partial confidentiality/integrity/availability according to CVSS, with network access and no authentication r...

CVE-2016-4928

The provided connected documents confirm CVE-2016-4928 as a Cross-Site Request Forgery vulnerability in Junos Space prior to version 15.2R2. The root cause is CSRF that allows remote attackers to perform certain administrative actions on Junos Space. Affected software is Junos Space (version

CVE-2016-4929

The CVE-2016-4929 vulnerability affects Juniper Networks Junos Space prior to version 15.2R2. It enables a command-injection that allows an attacker to execute arbitrary code with root privileges on affected devices. The issue stems from improper handling of input in the Junos Space management in...

CVE-2016-4930

CVE-2016-4930 is a cross-site scripting (XSS) vulnerability in Junos Space prior to 15.2R2. The affected product is Junos Space (network management software). The vulnerability allows remote attackers to steal sensitive information or perform certain administrative actions via the vulnerable web ...

CVE-2016-4931

CVE-2016-4931 affects Juniper Networks Junos Space prior to 15.2R2. The issue is an XML External Entity (XXE) injection in the product, allowing an attacker to trigger a denial of service. Public records consistently describe the vulnerability as an XML entity injection that can cause service dis...

CVE-2016-4931: Improper Restriction of XML External Entity Reference

XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...

CVE-2016-4930: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions...

CVE-2016-4929: Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...

CVE-2016-4928: Cross-Site Request Forgery (CSRF)

Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space...

CVE-2016-4927: Improper Input Validation

Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle MITM type of attacks while a Space device is communicating with managed devices...

CVE-2016-4926: Improper Authentication

Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...

PT-2017-8610

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 15.2R2 Description The issue is related to insufficient authentication, allowing remote network-based users with access to the Junos Space web interface to perform certain administrative tasks without proper...

PT-2017-8611

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 15.2R2 Description The issue is related to insufficient validation of SSH keys, which can lead to man-in-the-middle MITM type of attacks while a Space device is communicating with managed devices. Recommendations...

PT-2017-8615

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 15.2R2 Description The issue allows attackers to cause a denial of service through XML entity injection. Recommendations For versions prior to 15.2R2, update to version 15.2R2 or later to resolve the issue...

PT-2017-8613

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 15.2R2 Description A command injection issue allows attackers to execute arbitrary code as a root user. Recommendations For versions prior to 15.2R2, update to version 15.2R2 or later to resolve the issue...

PT-2017-8614

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 15.2R2 Description A cross-site scripting XSS issue allows remote attackers to steal sensitive information or perform certain administrative actions. Recommendations For versions prior to 15.2R2, update to version...

PT-2017-8612

Name of the Vulnerable Software and Affected Versions Junos Space versions prior to 15.2R2 Description A cross-site request forgery issue allows remote attackers to perform certain administrative actions on Junos Space. Recommendations For versions prior to 15.2R2, update to version 15.2R2 or lat...

Juniper Junos QFX / EX Series 'Etherleak' Improper Padding Memory Disclosure (JSA10773)

According to its self-reported version number, the remote Juniper Junos QFX or EX series device is affected by a memory disclosure vulnerability, known as Etherleak, due to padding Ethernet packets with data from previous packets instead of padding them with null bytes. An unauthenticated, adjace...

Juniper Junos rpd RIP DoS (JSA10772)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing process daemon rpd due to improper handling of RIP advertisements. An unauthenticated, remote attacker can exploit this issue, by sendin...

Juniper Junos rpd BGP add-path DoS (JSA10771)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing process daemon rpd due to improper handling of BGP packets. An unauthenticated, remote attacker can exploit this issue, by sending...