CVE-2017-10620: SRX Series: Antivirus updates are downloaded without verification

First published: Fri Oct 13 2017(Updated: )

Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle attacker to inject bogus signatures to cause service disruptions or make the device not detect certain types of attacks. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D55; 15.1X49 prior to 15.1X49-D110;

Credit: sirt@juniper.net

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/weakness
• agent/severity
• agent/references
• agent/title
• agent/author
• agent/tags
• agent/description
• agent/first-publish-date
• agent/event
• vendor/juniper
• canonical/juniper junos
• version/juniper junos/12.1x46
• version/juniper junos/12.1x46-d10
• version/juniper junos/12.1x46-d15
• version/juniper junos/12.1x46-d20
• version/juniper junos/12.1x46-d25
• version/juniper junos/12.1x46-d30
• version/juniper junos/12.1x46-d35
• version/juniper junos/12.1x46-d40
• version/juniper junos/12.1x46-d45
• version/juniper junos/12.1x46-d50
• version/juniper junos/12.1x46-d55
• version/juniper junos/12.1x46-d60
• version/juniper junos/12.1x46-d65
• canonical/juniper srx100
• canonical/juniper srx110
• canonical/juniper srx1400
• canonical/juniper srx1500
• canonical/juniper srx210
• canonical/juniper srx220
• canonical/juniper srx240
• canonical/juniper srx300
• canonical/juniper srx320
• canonical/juniper srx340
• canonical/juniper srx3400
• canonical/juniper srx345
• canonical/juniper srx3600
• canonical/juniper srx4100
• canonical/juniper srx4200
• canonical/juniper srx5400
• canonical/juniper srx550
• canonical/juniper srx5600
• canonical/juniper srx5800
• canonical/juniper srx650
• version/juniper junos/12.3x48
• version/juniper junos/12.3x48-d10
• version/juniper junos/12.3x48-d15
• version/juniper junos/12.3x48-d20
• version/juniper junos/12.3x48-d25
• version/juniper junos/12.3x48-d30
• version/juniper junos/12.3x48-d35
• version/juniper junos/12.3x48-d40
• version/juniper junos/12.3x48-d45
• version/juniper junos/12.3x48-d50
• version/juniper junos/12.3x48-d55
• version/juniper junos/15.1x49
• version/juniper junos/15.1x49-d10
• version/juniper junos/15.1x49-d100
• version/juniper junos/15.1x49-d20
• version/juniper junos/15.1x49-d30
• version/juniper junos/15.1x49-d35
• version/juniper junos/15.1x49-d40
• version/juniper junos/15.1x49-d45
• version/juniper junos/15.1x49-d50
• version/juniper junos/15.1x49-d55
• version/juniper junos/15.1x49-d60
• version/juniper junos/15.1x49-d65
• version/juniper junos/15.1x49-d70
• version/juniper junos/15.1x49-d75
• version/juniper junos/15.1x49-d80
• version/juniper junos/15.1x49-d90