CVE-2017-2349

Severity

CRITICAL

CVSS

9.9

EPSS

0.02285

Risk score

40.4

CISA KEV

No

PoC

No

Published

2017-07-14

Modified

2024-09-16

First seen

2026-08-07

Aliases

EUVD-2017-11532, GHSA-FWVF-MM38-FQ5J

Products

Juniper Networks:Junos OS 12.1X44 prior to 12.1X44-D60, Juniper Networks:Junos OS 12.1X46 prior to 12.1X46-D50, Juniper Networks:Junos OS 12.1X47 prior to 12.1X47-D30, 12.1X47-D35, Juniper Networks:Junos OS 12.3X48 prior to 12.3X48-D20, 12.3X48-D30, Juniper Networks:Junos OS 15.1X49 prior to 15.1X49-D20, 15.1X49-D30

Sources

euvd EUVD-2017-11532

Description

A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D50; 12.1X47 prior to 12.1X47-D30, 12.1X47-D35; 12.3X48 prior to 12.3X48-D20, 12.3X48-D30; 15.1X49 prior to 15.1X49-D20, 15.1X49-D30.

Description

References