CVE-2017-10603

7.0 HIGH
Published: July 17, 2017 Modified: May 13, 2026
View on NVD

Description

An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 15.1X53 prior to 15.1X53-D47, 15.1 prior to 15.1R3. Junos versions prior to 15.1 are not affected. No other Juniper Networks products or platforms are affected by this issue.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://www.securitytracker.com/id/1038901
Source: sirt@juniper.net
Third Party Advisory VDB Entry
https://kb.juniper.net/JSA10805
Source: sirt@juniper.net
Vendor Advisory
http://www.securitytracker.com/id/1038901
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
https://kb.juniper.net/JSA10805
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

4 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.0 / 10.0
EPSS (Exploit Probability)
0.4%
35th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

juniper