CVE-2017-2321: juniper networks northstar controller application
Vulnerability summary
CVE-2017-2321 is a high (CVSS 8.6) vulnerability in juniper networks northstar controller application. EPSS estimates a 1.45% chance of exploitation in the next 30 days, higher than 72.9% of scored vulnerabilities.
Timeline
- 24-04-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to full denials of services, modification of system states and files, and potential disclosure of sensitive information which may assist the attacker in further attacks on the system through the use of multiple attack vectors, including man-in-the-middle attacks, file injections, and malicious execution of commands causing out of bound memory conditions leading to other attacks.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.45%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.45% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Juniper1 product
- northstar_controller≤ 2.1.0
Juniper networks1 product
- northstar controller applicationprior to version 2.1.0 Service Pack 1
2 vendors · 2 products