Skip to main content

Northstar Controller CVE-2017-2331

HIGH
2017-04-24 sirt@juniper.net
7.3
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.3 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

1
CVE Published
Apr 24, 2017 - 15:59 cve.org
HIGH 7.3

DescriptionCVE.org

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and denials of service.

AnalysisAI

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies,. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and denials of service. Affected products include: Juniper Northstar Controller. Version information: version 2.1.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2017-2320 CRITICAL
10.0 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2332 HIGH
8.8 Apr 24

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

CVE-2017-2321 HIGH
8.6 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2317 HIGH
8.6 Apr 24

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2319 HIGH
8.3 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a m

CVE-2017-2323 HIGH
7.5 Apr 24

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2334 HIGH
7.5 Apr 24

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

CVE-2017-2325 MEDIUM
6.5 Apr 24

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

CVE-2017-2333 MEDIUM
6.5 Apr 24

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

CVE-2017-2318 MEDIUM
6.5 Apr 24

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

CVE-2017-2326 MEDIUM
6.5 Apr 24

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Serv

CVE-2017-2316 MEDIUM
6.5 Apr 24

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

Share

CVE-2017-2331 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy