CVE-2017-2331

4 documents4 sources
Severity
7.3HIGH
EPSS
0.7%
top 28.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 24
Latest updateMay 13

Description

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authentication bypass methods, information disclosure, modification of system files, and denials of service.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 3.9 | Impact: 3.4

Affected Packages2 packages

CVEListV5juniper_networks/northstar_controller_applicationprior to version 2.1.0 Service Pack 1

🔴Vulnerability Details

2
GHSA
GHSA-64vm-9chm-hwfr: A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 22022-05-13
CVEList
CVE-2017-2331: A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 22017-04-24

📋Vendor Advisories

1
Juniper
CVE-2017-2331: A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based m2017-04-24