CVE-2017-2306: High severity juniper networks junos space vulnerability
Published May 30, 2017
·Updated
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.
Affected Software
1 affected component
Juniper Junos Space<=16.1
Event History
May 30, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2306?
CVE-2017-2306 is rated as a critical severity vulnerability due to insufficient authorization checks allowing unauthorized code execution.
2
How do I fix CVE-2017-2306?
To fix CVE-2017-2306, upgrade your Junos Space version to 16.1R1 or later.
3
What are the potential impacts of CVE-2017-2306?
The potential impacts of CVE-2017-2306 include unauthorized code execution on the device by readonly users.
4
Which versions of Junos Space are affected by CVE-2017-2306?
All versions of Junos Space prior to version 16.1R1 are affected by CVE-2017-2306.
5
Who is affected by CVE-2017-2306?
Readonly users of the Junos Space administrative web interface are affected by CVE-2017-2306.