CVE-2017-2320
Quick assessment
Affected
Juniper Networks NorthStar Controller Application
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks NorthStar Controller Application是美国瞻博网络（Juniper Networks）公司的一款流量规划控制器。该控制器通过建立开放的行业标准协议来优化服务提供商的传输网络。 Juniper Networks NorthStar Controller Application 2.1.0 Service Pack 1之前的版本中存在安全漏洞。攻击者可利用该漏洞造成拒绝服务，更改NorthStar系统上的组件。
Possible ATT&CK Techniques 2 AI
T1210 · Exploitation of Remote Services T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-2320
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading to targeted information disclosure, modification of any component of the NorthStar system, including managed systems, and full denial of services to any systems under management which NorthStar interacts with using read-only or read-write credentials.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks NorthStar Controller Application 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks NorthStar Controller Application是美国瞻博网络（Juniper Networks）公司的一款流量规划控制器。该控制器通过建立开放的行业标准协议来优化服务提供商的传输网络。 Juniper Networks NorthStar Controller Application 2.1.0 Service Pack 1之前的版本中存在安全漏洞。攻击者可利用该漏洞造成拒绝服务，更改NorthStar系统上的组件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | NorthStar Controller Application | prior to version 2.1.0 Service Pack 1 | - |
|
II. Public POCs for CVE-2017-2320
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-2320
请登录查看更多情报信息。
Vendor Advisories for CVE-2017-2320 (2)
-
https://kb.juniper.net/JSA10783 x_refsource_CONFIRM
-
Same Patch Batch · Juniper Networks · 2017-04-24 · 23 CVEs total
| CVE-2017-2326 | Juniper Networks NorthStar Controller Application 信息泄露漏洞 | |
| CVE-2017-2322 | Juniper Networks NorthStar Controller Application 资源管理错误漏洞 | |
| CVE-2017-2340 | Juniper Networks Junos OS 输入验证漏洞 | |
| CVE-2017-2334 | Juniper Networks NorthStar Controller Application 信息泄露漏洞 | |
| CVE-2017-2333 | Juniper Networks NorthStar Controller Application 资源管理错误漏洞 | |
| CVE-2017-2332 | Juniper Networks NorthStar Controller Application 授权问题漏洞 | |
| CVE-2017-2331 | Juniper Networks NorthStar Controller Application 安全漏洞 | |
| CVE-2017-2330 | Juniper Networks NorthStar Controller Application 资源管理错误漏洞 | |
| CVE-2017-2329 | Juniper Networks NorthStar Controller Application 授权问题漏洞 | |
| CVE-2017-2328 | Juniper Networks NorthStar Controller Application 信息泄露漏洞 | |
| CVE-2017-2327 | Juniper Networks NorthStar Controller Application 资源管理错误漏洞 | |
| CVE-2017-2312 | Juniper Networks Junos OS 资源管理错误漏洞 | |
| CVE-2017-2325 | Juniper Networks NorthStar Controller Application 缓冲区错误漏洞 | |
| CVE-2017-2324 | Juniper Networks NorthStar Controller Application 命令注入漏洞 | |
| CVE-2017-2323 | Juniper Networks NorthStar Controller Application 资源管理错误漏洞 | |
| CVE-2017-2321 | Juniper Networks NorthStar Controller Application 权限许可和访问控制问题漏洞 | |
| CVE-2017-2319 | Juniper Networks NorthStar Controller Application 权限许可和访问控制问题漏洞 | |
| CVE-2017-2318 | Juniper Networks NorthStar Controller Application 信息泄露漏洞 | |
| CVE-2017-2317 | Juniper Networks NorthStar Controller Application 权限许可和访问控制问题漏洞 | |
| CVE-2017-2316 | Juniper Networks NorthStar Controller Application 缓冲区错误漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: NorthStar Controller Application
-
CVE-2017-2322
Juniper Networks NorthStar Controller Application 资源管理错误漏洞 -
CVE-2017-2316
Juniper Networks NorthStar Controller Application 缓冲区错误漏洞 -
CVE-2017-2317
Juniper Networks NorthStar Controller Application 权限许可和访问控制问 -
CVE-2017-2318
Juniper Networks NorthStar Controller Application 信息泄露漏洞 -
CVE-2017-2319
Juniper Networks NorthStar Controller Application 权限许可和访问控制问
Same vendor: Juniper Networks
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil
V. Comments for CVE-2017-2320
No comments yet