CVE-2017-2324: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to cause a denial of service condition...

CVE-2017-2329: Improper Authentication

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system services...

CVE-2017-2323: Undefined Security Weakness

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent denial of service to the path computation server service...

CVE-2017-2320: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the...

CVE-2017-2332: Improper Authentication

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment...

CVE-2017-2318: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges...

PT-2017-15350

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description A vulnerability may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of...

PT-2017-15354

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description A buffer overflow issue may allow an authenticated malicious user to cause a buffer overflow, leading to a denial of service. Recommendations...

CVE-2017-2321: Undefined Security Weakness

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of services, modification of system states and files, and potentia...

PT-2017-15348

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description A vulnerability may allow an authenticated malicious user to read log files, compromising the system's integrity or providing elevation of...

PT-2017-15358

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description The issue is related to insufficient authentication, which may allow an unprivileged, authenticated user to execute certain system files. This...

PT-2017-15351

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description A denial of service issue may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP...

CVE-2017-2325: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service...

CVE-2017-2333: Uncontrolled Resource Consumption

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network-based, authenticated attacker to consume enough system resources to cause a persistent denial of service by visiting certain...

Juniper NorthStar Controller Application Remote Elevation of Privilege Vulnerability

NorthStar is Juniper's SDN controller that dynamically builds SR TE-LSPs and observes labeling information for each link, LSP. Also based on traffic distribution, SR LSPs can be dynamically optimized. A remote elevation of privilege vulnerability exists in the Juniper NorthStar controller...

PT-2017-3100

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1 Description The issue is related to inadequate access control in the NorthStar Controller Application, which may allow an unauthenticated, unprivileged,...