CVE-2017-10623
Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
Key facts
- CVSS score
- 7.1 (v3.0)
- Severity
- HIGH
- CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H- Weakness (CWE)
- CWE-287
- EPSS score
- 0.9% (59th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2017-2270)
- Published
- October 13, 2017
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2017-2270 in the EU Vulnerability Database. Last updated in EUVD on September 17, 2024.
View on the EU Vulnerability DatabaseAffected products
- juniper / junos space
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- Junos Space Network Management Platform, with or without Network Director and with or without Security Director in Virtual Appliance - Juniper Networks, Inc. - FIPS 140 3779 - historical
References
- https://kb.juniper.net/JSA10826(Vendor Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain