2 lines
8.4 KiB
JSON
2 lines
8.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Junos OS","vendor":"Juniper Networks","versions":[{"status":"affected","version":"12.1X44 prior to 12.1X44-D60"},{"status":"affected","version":"12.1X46 prior to 12.1X46-D50"},{"status":"affected","version":"12.1X47 prior to 12.1X47-D30, 12.1X47-D35"},{"status":"affected","version":"12.3X48 prior to 12.3X48-D20, 12.3X48-D30"},{"status":"affected","version":"15.1X49 prior to 15.1X49-D20, 15.1X49-D30"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*","matchCriteriaId":"1B307477-C5F2-4D98-AF4C-640D326164C7","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*","matchCriteriaId":"AC405A12-112D-4C9D-90DA-6ED484109793","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*","matchCriteriaId":"3FC42F2D-7593-4DBE-AE89-A6B78E7F9089","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*","matchCriteriaId":"731A6469-3DE0-491A-BCC5-7642FB347ACE","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*","matchCriteriaId":"D12A8119-3E59-4062-9A04-1F6EA48B78E9","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*","matchCriteriaId":"E8B33B80-3189-4412-BFE0-359E755AB07A","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*","matchCriteriaId":"C0E8F87E-DEB2-4849-ABB5-75A67CFD2D39","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*","matchCriteriaId":"BDE231CE-0D93-4293-8720-4CCEE2EA651E","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*","matchCriteriaId":"74253C79-C13F-4FBD-B173-8E87A62845DD","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d50:*:*:*:*:*:*","matchCriteriaId":"96831D1B-881B-4B18-A330-9E32A0D21148","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d55:*:*:*:*:*:*","matchCriteriaId":"802A9024-3921-49CA-9B38-3BF8937687C5","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*","matchCriteriaId":"CFB89F64-16BB-4A14-9084-B338668D7FF1","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*","matchCriteriaId":"5A449C87-C5C3-48FE-9E46-64ED5DD5F193","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*","matchCriteriaId":"F4B6215F-76BF-473F-B325-0975B0EB101E","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*","matchCriteriaId":"A1C4A10C-49A3-4103-9E56-F881113BC5D7","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*","matchCriteriaId":"50E7FD07-A309-48EC-A520-C7F0FA35865C","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*","matchCriteriaId":"F868948A-04D7-473B-971F-721302653633","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*","matchCriteriaId":"830A9EBA-88F1-4277-B98F-75AC52A60824","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*","matchCriteriaId":"BFA2ADAB-E486-4DBB-8B84-CC095D102278","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*","matchCriteriaId":"9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*","matchCriteriaId":"0BB3DE56-1B04-4A53-B4A4-93286FC98463","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*","matchCriteriaId":"181C0D30-4476-48EE-A4A4-3B2461F4AC20","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*","matchCriteriaId":"63F559A2-2744-4771-9420-C70AA87496A2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*","matchCriteriaId":"040A6307-236E-4FAA-9A74-676F1DB0CF17","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*","matchCriteriaId":"350A0F1E-1057-4A8E-AB0B-7615B3877858","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x47:d35:*:*:*:*:*:*","matchCriteriaId":"FEE85C83-E6FC-42DE-9857-A1FFA3A1B82A","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*","matchCriteriaId":"7192552C-7D4A-4D95-BA79-CDF465E27D37","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*","matchCriteriaId":"3C82799B-BD25-4359-9E3D-4D7CA7367525","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*","matchCriteriaId":"C8C94365-988C-4A14-8E49-846152FDC666","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*","matchCriteriaId":"0E5FAA97-171F-4DB9-B78E-6E1A5F34336A","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D50; 12.1X47 prior to 12.1X47-D30, 12.1X47-D35; 12.3X48 prior to 12.3X48-D20, 12.3X48-D30; 15.1X49 prior to 15.1X49-D20, 15.1X49-D30."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos en la función IDP de Juniper Networks Junos OS en dispositivos de la serie SRX potencialmente permite a un usuario con acceso de inicio de sesión al dispositivo ejecutar comandos shell y elevar privilegios. Las versiones afectadas son Juniper Networks Junos OS versión 12.1X44 anterior a 12.1X44-D60; versión 12.1X46 anterior a 12.1X46-D50; versión 12.1X47 anterior a 12.1X47-D30, 12.1X47-D35; versión 12.3X48 anterior a 12.3X48-D20, 12.3X48-D30; versión 15.1X49 anterior a 15.1X49-D20, 15.1X49-D30."}],"id":"CVE-2017-2349","lastModified":"2026-06-17T01:16:01.503","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"COMPLETE","baseScore":9.0,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.0,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.1,"impactScore":6.0,"source":"sirt@juniper.net","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-07-17T13:18:24.610","references":[{"source":"sirt@juniper.net","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1038898"},{"source":"sirt@juniper.net","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10801"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1038898"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://kb.juniper.net/JSA10801"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-77"}],"source":"nvd@nist.gov","type":"Primary"}]}
|