QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-10603

Back to search

CVE-2017-10603

Published: Jul 14, 2017

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.0

7.0

HIGH

Description

An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 15.1X53 prior to 15.1X53-D47, 15.1 prior to 15.1R3. Junos versions prior to 15.1 are not affected. No other Juniper Networks products or platforms are affected by this issue.

VendorProductVersions

Juniper Networks

Junos OS

affected
15.1X53 prior to 15.1X53-D47
affected
15.1 prior to 15.1R3

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

1038901
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now