CVE-2017-10601 (GCVE-0-2017-10601)

Vulnerability from cvelistv5 – Published: 2017-07-14 14:00 – Updated: 2024-09-16 19:41
VLAI
Title
Junos OS: Insufficient authentication for user login when a specific system configuration error occurs.
Summary
A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password while trying to login through console, ssh, ftp, telnet or su, etc., This issue relies upon a device configuration precondition to occur. Typically, device configurations are the result of a trusted administrative change to the system's running configuration. The following error messages may be seen when this failure occurs: mgd: error: commit failed: (statements constraint check failed) Warning: Commit failed, activating partial configuration. Warning: Edit the router configuration to fix these errors. If the administrative changes are not made that result in such a failure, then this issue is not seen. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.3 prior to 12.3R10, 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2 prior to 13.2R8; 13.3 prior to 13.3R7; 14.1 prior to 14.1R4-S12, 14.1R5, 14.1R6; 14.1X53 prior to 14.1X53-D30; 14.2 prior to 14.2R4; 15.1 prior to 15.1F2, 15.1F3, 15.1R2.
Severity
9.8 (Critical)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
  • authentication bypass vulnerability
Assigner
juniper CNA under the mitre root
CNA scorecard B 84/100 over 193 records in the last 180 days details
References
URL Tags
https://kb.juniper.net/JSA10802 x_refsource_CONFIRM
http://www.securitytracker.com/id/1038902 vdb-entryx_refsource_SECTRACK
Impacted products
Vendor Product Version CPE status
Juniper Networks Junos OS Affected: 12.3 prior to 12.3R10, 12.3R11
Affected: 12.3X48 prior to 12.3X48-D20
Affected: 13.2 prior to 13.2R8
Affected: 13.3 prior to 13.3R7
Affected: 14.1 prior to 14.1R4-S12, 14.1R5, 14.1R6
Affected: 14.1X53 prior to 14.1X53-D30
Affected: 14.2 prior to 14.2R4
Affected: 15.1 prior to 15.1F2, 15.1F3, 15.1R2
guessed Create a notification for this product.
Date Public
2017-07-12 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:41:55.527Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA10802"
          },
          {
            "name": "1038902",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038902"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "status": "affected",
              "version": "12.3 prior to 12.3R10, 12.3R11"
            },
            {
              "status": "affected",
              "version": "12.3X48 prior to 12.3X48-D20"
            },
            {
              "status": "affected",
              "version": "13.2 prior to 13.2R8"
            },
            {
              "status": "affected",
              "version": "13.3 prior to 13.3R7"
            },
            {
              "status": "affected",
              "version": "14.1 prior to 14.1R4-S12, 14.1R5, 14.1R6"
            },
            {
              "status": "affected",
              "version": "14.1X53 prior to 14.1X53-D30"
            },
            {
              "status": "affected",
              "version": "14.2 prior to 14.2R4"
            },
            {
              "status": "affected",
              "version": "15.1 prior to 15.1F2, 15.1F3, 15.1R2"
            }
          ]
        }
      ],
      "datePublic": "2017-07-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password while trying to login through console, ssh, ftp, telnet or su, etc., This issue relies upon a device configuration precondition to occur. Typically, device configurations are the result of a trusted administrative change to the system\u0027s running configuration. The following error messages may be seen when this failure occurs: mgd: error: commit failed: (statements constraint check failed) Warning: Commit failed, activating partial configuration. Warning: Edit the router configuration to fix these errors. If the administrative changes are not made that result in such a failure, then this issue is not seen. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.3 prior to 12.3R10, 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2 prior to 13.2R8; 13.3 prior to 13.3R7; 14.1 prior to 14.1R4-S12, 14.1R5, 14.1R6; 14.1X53 prior to 14.1X53-D30; 14.2 prior to 14.2R4; 15.1 prior to 15.1F2, 15.1F3, 15.1R2."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "authentication bypass vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-15T09:57:01.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA10802"
        },
        {
          "name": "1038902",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038902"
        }
      ],
      "title": "Junos OS: Insufficient authentication for user login when a specific system configuration error occurs.",
      "workarounds": [
        {
          "lang": "en",
          "value": "Make sure authentication works as expected after a system configuration change.\n\nUse the SSH certificate based authentication.\n\nUse access lists or firewall filters to limit access to the device only from trusted administrative hosts, networks and users."
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2017-07-12T09:00",
          "ID": "CVE-2017-10601",
          "STATE": "PUBLIC",
          "TITLE": "Junos OS: Insufficient authentication for user login when a specific system configuration error occurs."
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "",
                            "version_value": "12.3 prior to 12.3R10, 12.3R11"
                          },
                          {
                            "platform": "",
                            "version_value": "12.3X48 prior to 12.3X48-D20"
                          },
                          {
                            "platform": "",
                            "version_value": "13.2 prior to 13.2R8"
                          },
                          {
                            "platform": "",
                            "version_value": "13.3 prior to 13.3R7"
                          },
                          {
                            "platform": "",
                            "version_value": "14.1 prior to 14.1R4-S12, 14.1R5, 14.1R6"
                          },
                          {
                            "platform": "",
                            "version_value": "14.1X53 prior to 14.1X53-D30"
                          },
                          {
                            "platform": "",
                            "version_value": "14.2 prior to 14.2R4"
                          },
                          {
                            "platform": "",
                            "version_value": "15.1 prior to 15.1F2, 15.1F3, 15.1R2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "configuration": [],
        "credit": [],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password while trying to login through console, ssh, ftp, telnet or su, etc., This issue relies upon a device configuration precondition to occur. Typically, device configurations are the result of a trusted administrative change to the system\u0027s running configuration. The following error messages may be seen when this failure occurs: mgd: error: commit failed: (statements constraint check failed) Warning: Commit failed, activating partial configuration. Warning: Edit the router configuration to fix these errors. If the administrative changes are not made that result in such a failure, then this issue is not seen. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.3 prior to 12.3R10, 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2 prior to 13.2R8; 13.3 prior to 13.3R7; 14.1 prior to 14.1R4-S12, 14.1R5, 14.1R6; 14.1X53 prior to 14.1X53-D30; 14.2 prior to 14.2R4; 15.1 prior to 15.1F2, 15.1F3, 15.1R2."
            }
          ]
        },
        "exploit": "This issue was found during internal product security testing. Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "authentication bypass vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA10802",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA10802"
            },
            {
              "name": "1038902",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038902"
            }
          ]
        },
        "solution": "The following software releases have been updated to resolve this specific issue: 12.3R10, 12.3R11, 12.3X48-D20, 13.2R8, 13.3R7, 14.1R4-S12, 14.1R5, 14.1R6, 14.1X53-D30, 14.2R4, 15.1F2, 15.1F3, 15.1R2, 15.1X49-D10, 16.1R1, and all subsequent releases.\n\nThis issue is being tracked as PR 1075580 and is visible on the Customer Support website.",
        "work_around": [
          {
            "lang": "en",
            "value": "Make sure authentication works as expected after a system configuration change.\n\nUse the SSH certificate based authentication.\n\nUse access lists or firewall filters to limit access to the device only from trusted administrative hosts, networks and users."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2017-10601",
    "datePublished": "2017-07-14T14:00:00.000Z",
    "dateReserved": "2017-06-28T00:00:00.000Z",
    "dateUpdated": "2024-09-16T19:41:55.318Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2017-10601",
      "date": "2026-11-12",
      "epss": "0.01822",
      "percentile": "0.7908"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8E014A0D-0054-4EBA-BA1F-035B74BD822F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
                    "matchCriteriaId": "F0DD051A-E486-4A9D-A978-A5A980AAF237",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "C6F309FD-0A5A-4C86-B227-B2B511A5CEB4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*",
                    "matchCriteriaId": "960059B5-0701-4B75-AB51-0A430247D9F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*",
                    "matchCriteriaId": "1D1DCA52-DA81-495B-B516-5571F01E3B0A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r6:*:*:*:*:*:*",
                    "matchCriteriaId": "05E187F6-BACD-4DD5-B393-B2FE4349053A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r7:*:*:*:*:*:*",
                    "matchCriteriaId": "3C240840-A6BC-4E3D-A60D-22F08E67E2B2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r8:*:*:*:*:*:*",
                    "matchCriteriaId": "CC90563F-6BCB-4D77-8FD4-584E3A6C7741",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3:r9:*:*:*:*:*:*",
                    "matchCriteriaId": "5AD03BA7-D9EC-420F-97C4-383F79D6873F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
                    "matchCriteriaId": "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
                    "matchCriteriaId": "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CAB7D840-9469-4CE2-8DBF-017A44741374",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "D3A0A607-7D3C-4F2A-B5F5-576A70649CB1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "32E9620A-7C0A-474C-919E-13609FFE580D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "672D3A38-92B4-4F33-82A6-B2D3F3403AF3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*",
                    "matchCriteriaId": "F5C24441-6E9D-4EF7-8903-A109A52340C0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*",
                    "matchCriteriaId": "7CB98C4F-617F-4F51-A86E-D1EBE2BDE583",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r6:*:*:*:*:*:*",
                    "matchCriteriaId": "A24E3EA6-810D-4885-8BE5-8A70E61E7589",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r7:*:*:*:*:*:*",
                    "matchCriteriaId": "767182F3-E97B-4E21-8FD5-A50C9F42ED60",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r7-s1:*:*:*:*:*:*",
                    "matchCriteriaId": "8935F46F-084A-473E-94B1-011DA15D52AE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.2:r7-s2:*:*:*:*:*:*",
                    "matchCriteriaId": "2D252DA6-1269-42A0-A6DB-070AAC8396B2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E4AF5DAA-62F5-491F-A9CE-098970671D43",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.3:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "0F2E537B-9504-4912-B231-0D83F4459469",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "4BCB3837-DCBC-4997-B63E-E47957584709",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.3:r4:*:*:*:*:*:*",
                    "matchCriteriaId": "6C88E2B1-469B-442B-9FC0-7C9408CE3917",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.3:r5:*:*:*:*:*:*",
                    "matchCriteriaId": "1FB5A368-E582-4DFD-87B4-C887DA908E47",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:13.3:r6:*:*:*:*:*:*",
                    "matchCriteriaId": "70ED0B93-2CFC-474F-B199-F78E1C67E8C7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6237291A-B861-4D53-B7AA-C53A44B76896",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "9C778627-820A-48F5-9680-0205D6DB5EB6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "FA7F03DC-73A2-4760-B386-2A57E9C97E65",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "0CA10003-D52B-4110-9D7A-F50895E6BA17",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
                    "matchCriteriaId": "1B2D843A-8ADE-4888-8960-B48394DEA1D2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
                    "matchCriteriaId": "3BE66516-A06D-4C0F-8346-DFC8865C8FE8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
                    "matchCriteriaId": "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9C7FCCC1-B151-465A-8327-26DB5DC074F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
                    "matchCriteriaId": "09771B8F-8B2A-4E8B-B4D3-80677697FCF3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
                    "matchCriteriaId": "55E2F909-E1CC-45AA-ABA9-58178B751808",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
                    "matchCriteriaId": "E1AA12C5-4520-4F79-80BE-66112F7AFC2A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
                    "matchCriteriaId": "807C8110-5CC2-45F0-B094-BBF9C0B63BDD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
                    "matchCriteriaId": "547E5737-D385-49B9-A69F-A3B185A34116",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
                    "matchCriteriaId": "2ED257ED-A56B-48A6-8568-65F36FFFC753",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D59449C6-5BD5-4C07-AEF6-EEBC70D9C4C7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "79149AA0-17D1-4522-894F-C025F7A30FD7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "30726286-7CB1-4E5D-AE44-2B4D84795900",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "33BE028F-2961-414A-9D42-C4861566C2DC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
                    "matchCriteriaId": "E85AB30C-03FC-44DB-A8AA-B916A905CA66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
                    "matchCriteriaId": "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
                    "matchCriteriaId": "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
                    "matchCriteriaId": "0E0ECBD8-3D66-49DA-A557-5695159F0C06",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "0E6CD065-EC06-4846-BD2A-D3CA7866070F",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password while trying to login through console, ssh, ftp, telnet or su, etc., This issue relies upon a device configuration precondition to occur. Typically, device configurations are the result of a trusted administrative change to the system\u0027s running configuration. The following error messages may be seen when this failure occurs: mgd: error: commit failed: (statements constraint check failed) Warning: Commit failed, activating partial configuration. Warning: Edit the router configuration to fix these errors. If the administrative changes are not made that result in such a failure, then this issue is not seen. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 12.3 prior to 12.3R10, 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2 prior to 13.2R8; 13.3 prior to 13.3R7; 14.1 prior to 14.1R4-S12, 14.1R5, 14.1R6; 14.1X53 prior to 14.1X53-D30; 14.2 prior to 14.2R4; 15.1 prior to 15.1F2, 15.1F3, 15.1R2."
          },
          {
            "lang": "es",
            "value": "Una configuraci\u00f3n de dispositivo espec\u00edfica puede resultar en una condici\u00f3n de fallo de confirmaci\u00f3n. Cuando esto ocurre, un usuario inicia sesi\u00f3n sin ser solicitada una contrase\u00f1a mientras intenta iniciar sesi\u00f3n por medio de la consola, ssh, ftp, telnet o su, etc., Este problema se basa en una condici\u00f3n previa de configuraci\u00f3n del dispositivo para presentarse. T\u00edpicamente, las configuraciones de dispositivo son el resultado de un cambio administrativo de confianza en la configuraci\u00f3n en ejecuci\u00f3n del sistema. Los siguientes mensajes de error se pueden visualizar cuando \u00e9ste fallo se presenta: mgd: error: commit failed: (statements constraint check failed) Warning: Commit failed, activating partial configuration. Warning: Edit the router configuration to fix these errors. Si no se realizan los cambios administrativos que resultan en un fallo, entonces este problema no se visualiza. Ning\u00fan otro producto o plataforma de Juniper Networks se ve afectado por este problema. Las versiones afectadas son Juniper Networks Junos OS versi\u00f3n 12.3 anterior a 12.3R10, 12.3R11; versi\u00f3n 12.3X48 anterior a 12.3X48-D20; versi\u00f3n 13.2 anterior a 13.2R8; versi\u00f3n 13.3 anterior a 13.3R7; versi\u00f3n 14.1 anterior a 14.1R4-S12, 14.1R5, 14.1R6; versi\u00f3n 14.1X53 anterior a 14.1X53-D30; versi\u00f3n 14.2 anterior a 14.2R4; versi\u00f3n 15.1 anterior a 15.1F2, 15.1F3, 15.1R2."
          }
        ],
        "id": "CVE-2017-10601",
        "lastModified": "2026-05-13T00:24:29.033",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 10.0,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "sirt@juniper.net",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2017-07-17T13:18:18.627",
        "references": [
          {
            "source": "sirt@juniper.net",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1038902"
          },
          {
            "source": "sirt@juniper.net",
            "tags": [
              "Mitigation",
              "Vendor Advisory"
            ],
            "url": "https://kb.juniper.net/JSA10802"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1038902"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mitigation",
              "Vendor Advisory"
            ],
            "url": "https://kb.juniper.net/JSA10802"
          }
        ],
        "sourceIdentifier": "sirt@juniper.net",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-287"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.