CVE-2017-2322

low-risk

Published 2017-04-24

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP ports which are normally reserved for other system services.

Do I need to act?

0.06% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Northstar Controller

Affected Vendors

Juniper

References (4)

Third Party Advisory http://www.securityfocus.com/bid/97613

Mitigation https://kb.juniper.net/JSA10783

Third Party Advisory http://www.securityfocus.com/bid/97613

Mitigation https://kb.juniper.net/JSA10783

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal