CVE-2017-10622

published 2017-10-13

CVE-2017-10622: An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to…

Priority P2 62 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3. This issue was found by an external security researcher.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
juniper	junos_os	—	—
juniper	junos_space	—	—
juniper	junos_space	—	—
juniper	junos_space	—	—
juniper_networks	junos_space	—	—
juniper_networks	junos_space	—	—

Detection & IOCs extracted from sources · hover to see the quote

• → Unauthenticated remote login attempts targeting privileged user accounts on Junos Space Network Management Platform should be investigated as potential exploitation of this authentication bypass ↗

• · Vulnerability only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3; patched or later versions are not affected ↗

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-287