CVE-2017-2317

En bref

Sévérité
Non disponible
EPSS
EPSS 0.95 % · centile 61 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
juniper
Statut NVD
Modified

Description

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause denials of services to underlying database tables leading to potential information disclosure, modification of system states, and partial to full denial of services relying upon data modified by an attacker.

Scores

VersionScoreVecteurÉvalué par
CVSS 3.0HIGH 8.6CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0HIGH 7.5AV:N/AC:L/Au:N/C:P/I:P/A:PNVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Juniper Networks · NorthStar Controller Applicationaffected prior to version 2.1.0 Service Pack 1

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD