Vulnerability CVE-2017-2342

Vulnerability Name:

CVE-2017-2342 (CCN-128511)

Assigned:

2016-12-01

Published:

2017-07-13

Updated:

2019-10-09

Summary:

MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link can not be established. It falls back to an unencrypted link. This can happen when MACsec is configured on ports that are not capable of MACsec or when a secure link can not be established. This can mislead customers into believing that a link is secure. On SRX 300 series devices, prior to 15.1X49-D100, MACsec was only supported on control and fabric ports of SRX340 and SRX345 devices. SRX300 and and SRX320 did not have any MACsec capable ports. Configuring MACsec on ports that were not MACsec capable would have resulted in this issue. Affected releases are Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series.

CVSS v3 Severity:

8.1 High (CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
7.1 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Adjacent Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

8.1 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
7.1 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Adjacent Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:A/AC:M/Au:N/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Adjacent_Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

7.8 High (CCN CVSS v2 Vector: AV:A/AC:L/Au:N/C:C/I:C/A:N)

Exploitability Metrics:	Access Vector (AV): Adjacent_Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): None

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2017-2342

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1038890

Source: XF
Type: UNKNOWN
juniper-cve20172342-info-disc(128511)

Source: CCN
Type: Juniper Networks Security Bulletin JSA10790
MACsec failure to report errors (CVE-2017-2342)

Source: CONFIRM
Type: Vendor Advisory
https://kb.juniper.net/JSA10790

Vulnerable Configuration:

Configuration 1:

cpe:/o:juniper:junos:15.1x49:d10:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d20:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d30:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d35:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d40:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d45:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d50:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d55:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d60:*:*:*:*:*:*

OR cpe:/o:juniper:junos:15.1x49:d65:*:*:*:*:*:*