Command Injection Vulnerability in Juniper Networks NorthStar Controller
CVE-2017-2324
5.3MEDIUM
Key Information:
- Vendor
- Juniper Networks
- Vendor
- CVE Published:
- 24 April 2017
Summary
The vulnerability in Juniper Networks' NorthStar Controller Application prior to version 2.1.0 Service Pack 1 allows attackers to exploit command injection, potentially resulting in a denial of service condition. This vulnerability enables unauthorized network-based actors to execute malicious commands within the application environment, disrupting normal operations and affecting network management capabilities. The flaw underscores the importance of keeping software updated to mitigate risks associated with exploitation.
Affected Version(s)
NorthStar Controller Application prior to version 2.1.0 Service Pack 1
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved