← Back

CVE-2017-10602

nvd nist
Published: Jul 17, 2017Modified: May 13, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute code with root privileges. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D46 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 14.1X53 versions prior to 14.1X53-D130 on QFabric System; 14.2 versions prior to 14.2R4-S9, 14.2R6; 15.1 versions prior to 15.1F5, 15.1R3; 15.1X49 versions prior to 15.1X49-D40 on SRX Series; 15.1X53 versions prior to 15.1X53-D47 on NFX150, NFX250; 15.1X53 versions prior to 15.1X53-D65 on QFX10000 Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5110, QFX5200.

Affected (35)

Products: Juniper: Junos
1 product
Junos
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 14.1x53
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 14.2
Version 14.2 r1
Version 14.2 r2
Version 14.2 r3
Version 14.2 r4
Version 14.2 r5
Configuration C
12 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1
Version 15.1 a1
Version 15.1 f1
Version 15.1 f2-s1
Version 15.1 f2-s2
Version 15.1 f2-s3
Version 15.1 f2-s4
Version 15.1 f2
Version 15.1 f3
Version 15.1 f4
Version 15.1 f6
Version 15.1 r3
Configuration D
5 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1x49-d10
Version 15.1x49-d20
Version 15.1x49-d30
Version 15.1x49-d35
Version 15.1x49
Configuration E
11 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1x53 d10
Version 15.1x53 d20
Version 15.1x53 d21
Version 15.1x53 d25
Version 15.1x53 d30
Version 15.1x53 d32
Version 15.1x53 d33
Version 15.1x53 d34
Version 15.1x53 d40
Version 15.1x53 d45
Version 15.1x53 d70

References (6)

Source: sirt@juniper.net
Third Party AdvisoryVDB Entry
Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.