CVE-2017-10622: critical vulnerability in Juniper Networks Junos Space
Junos Space: Authentication bypass vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 5.4%
An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3. This issue was found by an external security researcher.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Juniper Networks · Junos SpaceRelated CVEs — Juniper Networks Junos Space
In the same product, most dangerous first.
CVE-2020-1611MEDIUMJunos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.EPSS 1.7%CVE-2018-0046HIGHJunos Space: Reflected Cross-site Scripting vulnerability in OpenNMSEPSS 1.6%CVE-2017-2306—CVE-2017-2306EPSS 1.6%CVE-2024-39563MEDIUMJunos Space: Remote Command Execution (RCE) vulnerability in web applicationEPSS 1.3%CVE-2017-2311—CVE-2017-2311EPSS 1.3%CVE-2017-10612HIGHJunos Space: Persistent Cross site scripting in Junos SpaceEPSS 1.3%