CVE-2017-10602

A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and access to Junos CLI, to execute code with root privileges. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D46 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 14.1X53 versions prior to 14.1X53-D130 on QFabric System; 14.2 versions prior to 14.2R4-S9, 14.2R6; 15.1 versions prior to 15.1F5, 15.1R3; 15.1X49 versions prior to 15.1X49-D40 on SRX Series; 15.1X53 versions prior to 15.1X53-D47 on NFX150, NFX250; 15.1X53 versions prior to 15.1X53-D65 on QFX10000 Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5110, QFX5200.

• CWE-119

• http://www.securityfocus.com/bid/100323
• http://www.securitytracker.com/id/1038900Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10803Vendor Advisory
• http://www.securityfocus.com/bid/100323
• http://www.securitytracker.com/id/1038900Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10803Vendor Advisory

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1057Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-1058Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-1059Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-1060Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10600ubuntu-image 1.0 before 2017-07-07, when invoked as non-root…
• CVE-2017-10601A specific device configuration can result in a commit failu…9.8
• CVE-2017-10603An XML injection vulnerability in Junos OS CLI can allow a l…7
• CVE-2017-10604When the device is configured to perform account lockout wit…5.3
• CVE-2017-10605On all vSRX and SRX Series devices, when the DHCP or DHCP re…8.6
• CVE-2017-10606Version 4.40 of the TPM (Trusted Platform Module) firmware o…4.4
• CVE-2017-10607Juniper Networks Junos OS 16.1R1, and services releases base…7.5
• CVE-2017-10608Any Juniper Networks SRX series device with one or more ALGs…7.5