VULNERABILITY INTELLIGENCE

CVE-2017-2308

CVSS score6.5 MEDIUM

EPSS probability1.21%

CISA KEVNot currently listed

Published2017-05-30

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device.

Weakness classification

CWE-611: Improper Restriction of XML External Entity Reference

Primary references

sirt@juniper.net — Third Party Advisory, VDB Entry
sirt@juniper.net — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory