CVE-2017-2320

En bref

Sévérité
Non disponible
EPSS
EPSS 1.86 % · centile 79 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
juniper
Statut NVD
Modified

Description

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the NorthStar system, including managed systems, and full denial of services to any systems under management which NorthStar interacts with using read-only or read-write credentials.

Scores

VersionScoreVecteurÉvalué par
CVSS 3.0CRITICAL 10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0HIGH 10.0AV:N/AC:L/Au:N/C:C/I:C/A:CNVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Juniper Networks · NorthStar Controller Applicationaffected prior to version 2.1.0 Service Pack 1

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD