Vulnerability Details : CVE-2019-0017
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Products affected by CVE-2019-0017
- cpe:2.3:a:juniper:junos_space:16.1:r2:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:16.1:r3:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:16.1:r1:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:15.1:r1:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:15.1:r3:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:14.1:r1:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:13.3:r2:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:13.3:r4:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:14.1:r2:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:14.1:r3:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:15.2:r2:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:15.2:r1:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:14.1:-:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:17.2:r1.4:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:18.1:r1:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:18.2:r1:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:16.1:-:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:13.3:r3:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:15.1:r4:*:*:*:*:*:*
- cpe:2.3:a:juniper:junos_space:15.2:-:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-0017
0.30%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 52 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-0017
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
8.0
|
6.4
|
NIST | |
|
8.8
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST | |
|
6.5
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
2.8
|
3.6
|
Juniper Networks, Inc. |
CWE ids for CVE-2019-0017
-
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-0017
-
https://kb.juniper.net/JSA10917
Juniper Networks - 2019-01 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 18.3R1 and 18.4R1 releasesVendor Advisory
Jump to