CVE-2017-2321

En bref

Sévérité
Non disponible
EPSS
EPSS 1.45 % · centile 73 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
juniper
Statut NVD
Modified

Description

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of services, modification of system states and files, and potential disclosure of sensitive information which may assist the attacker in further attacks on the system through the use of multiple attack vectors, including man-in-the-middle attacks, file injections, and malicious execution of commands causing out of bound memory conditions leading to other attacks.

Scores

VersionScoreVecteurÉvalué par
CVSS 3.0HIGH 8.6CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0HIGH 7.5AV:N/AC:L/Au:N/C:P/I:P/A:PNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Juniper Networks · NorthStar Controller Applicationaffected prior to version 2.1.0 Service Pack 1

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD