CoreCVE
Back

CRITICAL

Junos Space: privilege escalation vulnerabilities in Junos Space

Published Oct 13, 2017

Description

A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. All versions of Juniper Networks Junos Space prior to 15.1R3 are affected.

Affected products

Remediation

Vendor solution

Limit access to Junos Space from only trusted networks Use administrative jump boxes with no internet access and employ anti-scripting techniques. In addition to the recommendations listed above, it is good security practice to limit the exploitable attack surface of critical infrastructure networking equipment. Use access lists or firewall filters to limit access to the devices administrative interfaces only from trusted, administrative networks or hosts.

Metrics

Weaknesses (3)

CWE-200

Exposure of Sensitive Information

CWE-255

CWE-352

CSRF

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner juniper
Published Oct 13, 2017
Updated Sep 17, 2024
Reserved Dec 30, 2015
Link CVE-2016-1265
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2016-1265
Red Hat
Severity n/a
Public date n/a
Links CVE-2016-1265