PT-2017-15350 · Juniper Networks · Northstar Controller Application

Publicado 2017-04-24 · Atualizado 2019-10-03 · CVE-2017-2321

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks NorthStar Controller Application versions prior to 2.1.0 Service Pack 1

Description A vulnerability may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of services, modification of system states and files, and potential disclosure of sensitive information. This could assist the attacker in further attacks on the system through multiple attack vectors, including man-in-the-middle attacks, file injections, and malicious execution of commands, potentially leading to out of bound memory conditions and other attacks.

Recommendations For versions prior to 2.1.0 Service Pack 1, update to version 2.1.0 Service Pack 1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive system services and files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2017-2321

Produtos afetados

Northstar Controller Application

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2321 · Nota de Segurança
• http://securityfocus.com/bid/97693 · Nota
• https://kb.juniper.net/JSA10783 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-2321 · Aviso do Fabricante