A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D50; 12.1X47 prior to 12.1X47-D30, 12.1X47-D35; 12.3X48 prior to 12.3X48-D20, 12.3X48-D30; 15.1X49 prior to 15.1X49-D20, 15.1X49-D30.
References
| Link | Resource |
|---|---|
| http://www.securitytracker.com/id/1038898 | Third Party Advisory VDB Entry |
| https://kb.juniper.net/JSA10801 | Vendor Advisory |
| http://www.securitytracker.com/id/1038898 | Third Party Advisory VDB Entry |
| https://kb.juniper.net/JSA10801 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:23
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 9.0
v3 : 9.9 |
| References | () http://www.securitytracker.com/id/1038898 - Third Party Advisory, VDB Entry | |
| References | () https://kb.juniper.net/JSA10801 - Vendor Advisory |
Information
Published : 2017-07-17 13:18
Updated : 2024-11-21 03:23
NVD link : CVE-2017-2349
Mitre link : CVE-2017-2349
CVE.ORG link : CVE-2017-2349
JSON object : View
Products Affected
juniper
- junos
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')