CVE-2017-2341

An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Junos OS 14.1X53 prior to 14.1X53-D40 on QFX5110, QFX5200, QFX10002, QFX10008, QFX10016, EX4600 and NFX250; 15.1 prior to 15.1R5 on EX4600; 15.1X49 prior to 15.1X49-D70 on vSRX, SRX1500, SRX4100, SRX4200; 16.1 prior to 16.1R2 on EX4600, ACX5000 series. This issue does not affect vMX. No other Juniper Networks products or platforms are affected by this issue.

• CWE-287

• http://www.securitytracker.com/id/1038893Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10787Vendor Advisory
• http://www.securitytracker.com/id/1038893Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10787Vendor Advisory

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2335A persistent cross site scripting vulnerability in NetScreen…8.4
• CVE-2017-2336A reflected cross site scripting vulnerability in NetScreen …9.6
• CVE-2017-2337A persistent cross site scripting vulnerability in NetScreen…8.4
• CVE-2017-2338A persistent cross site scripting vulnerability in NetScreen…8.4
• CVE-2017-2339A persistent cross site scripting vulnerability in NetScreen…8.4
• CVE-2017-2340On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15…
• CVE-2017-2342MACsec feature on Juniper Networks Junos OS 15.1X49 prior to…8.1
• CVE-2017-2343The Integrated User Firewall (UserFW) feature was introduced…10
• CVE-2017-2344A routine within an internal Junos OS sockets library is vul…7.8
• CVE-2017-2345On Junos OS devices with SNMP enabled, a network based attac…9.8
• CVE-2017-2346An MS-MPC or MS-MIC Service PIC may crash when large fragmen…5.9
• CVE-2017-2347A denial of service vulnerability in rpd daemon of Juniper N…6.5