CVE-2017-2305: vulnerability in Juniper Networks Junos Space
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.1%
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation.
Affected products
Juniper Networks · Junos SpaceRelated CVEs — Juniper Networks Junos Space
In the same product, most dangerous first.
CVE-2017-10622CRITICALJunos Space: Authentication bypass vulnerabilityEPSS 5.4%CVE-2020-1611MEDIUMJunos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.EPSS 1.7%CVE-2018-0046HIGHJunos Space: Reflected Cross-site Scripting vulnerability in OpenNMSEPSS 1.6%CVE-2017-2306—CVE-2017-2306EPSS 1.6%CVE-2024-39563MEDIUMJunos Space: Remote Command Execution (RCE) vulnerability in web applicationEPSS 1.3%CVE-2017-2311—CVE-2017-2311EPSS 1.3%