VULNERABILITY INTELLIGENCE

CVE-2017-2306

CVSS score8.8 HIGH

EPSS probability1.59%

CISA KEVNot currently listed

Published2017-05-30

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.

Weakness classification

CWE-863: Incorrect Authorization

Primary references

sirt@juniper.net — Third Party Advisory, VDB Entry
sirt@juniper.net — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory