« Back to list

CVE-2017-10604

Status: ModifiedMedium (5.3)—

When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect password can trigger a lockout of the root account. When an SRX Series device is in cluster mode, and a cluster sync or failover operation occurs, then there will be errors associated with synch or failover while the root account is locked out.

Read full descriptionShow less

Administrators can confirm if the root account is locked out via the following command root@device> show system login lockout user root User Lockout start Lockout end root 1995-01-01 01:00:01 PDT 1995-11-01 01:31:01 PDT Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D65 on SRX series; 12.3X48 prior to 12.3X48-D45 on SRX series; 15.1X49 prior to 15.1X49-D75 on SRX series.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Juniper — Junos

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2017-10604",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "12.1X46 prior to 12.1X46-D65"
            },
            {
              "status": "affected",
              "version": "12.3X48 prior to 12.3X48-D45"
            },
            {
              "status": "affected",
              "version": "15.1X49 prior to 15.1X49-D75"
            }
          ],
          "platforms": [
            "SRX series"
          ]
        }
      ]
    }
  ],
  "published": "2017-07-17T13:18:18.720",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1038886",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10806",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "http://www.securitytracker.com/id/1038886",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/JSA10806",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-307"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect password can trigger a lockout of the root account. When an SRX Series device is in cluster mode, and a cluster sync or failover operation occurs, then there will be errors associated with synch or failover while the root account is locked out. Administrators can confirm if the root account is locked out via the following command root@device> show system login lockout user root User Lockout start Lockout end root 1995-01-01 01:00:01 PDT 1995-11-01 01:31:01 PDT Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D65 on SRX series; 12.3X48 prior to 12.3X48-D45 on SRX series; 15.1X49 prior to 15.1X49-D75 on SRX series."
    },
    {
      "lang": "es",
      "value": "Cuando el dispositivo está configurado para realizar el bloqueo de la cuenta con un período de tiempo definido, cualquier usuario no autenticado que intente iniciar sesión como root con una contraseña incorrecta puede desencadenar un bloqueo de la cuenta root. Cuando un dispositivo de la serie SRX está en modo clúster y se produce una operación de sincronización o conmutación por error del clúster, entonces habrá errores asociados con la sincronización o la conmutación por error mientras la cuenta root está bloqueada. Los administradores pueden confirmar si la cuenta root está bloqueada por medio del siguiente comando root@device> show system login show system login lockout user root User Lockout start Lockout end root 1995-01-01 01:00:01 PDT 1995-11-01 01:31:01 PDT Las versiones afectadas son Juniper Networks Junos OS versión 12.1X46 anterior a 12.1X46-D65 en la serie SRX; versión 12.3X48 anterior a 12.3X48-D45 en la serie SRX; versión 15.1X49 anterior a 15.1X49-D75 en la serie SRX."
    }
  ],
  "lastModified": "2026-06-17T01:00:25.733",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFB89F64-16BB-4A14-9084-B338668D7FF1"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4B6215F-76BF-473F-B325-0975B0EB101E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50E7FD07-A309-48EC-A520-C7F0FA35865C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F868948A-04D7-473B-971F-721302653633"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "830A9EBA-88F1-4277-B98F-75AC52A60824"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:srx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "91484FF4-F20C-4541-A5D9-128157E4F11D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7192552C-7D4A-4D95-BA79-CDF465E27D37"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C82799B-BD25-4359-9E3D-4D7CA7367525"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "094485FF-960C-4533-A2AF-6C4D420D260D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:srx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "91484FF4-F20C-4541-A5D9-128157E4F11D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20DABA6A-FA7A-4289-8C6A-2B93689A5440"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18468579-0195-4DDE-BAA5-4BE4068F3A69"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "870244F3-1C05-4F10-A205-5189BB860F46"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "235EE40B-AA15-4F39-8087-A051F4F70995"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17330544-3AFC-463E-A146-2840A8AE17D2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "884E4A85-ED42-4391-9FDD-9052F957743A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1901864B-688B-4352-A587-4B96B4E49FB1"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B6670FB-9F5A-469B-97F2-074C28572065"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:srx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "91484FF4-F20C-4541-A5D9-128157E4F11D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}