title: Junos Space: Unrestricted file upload vulnerability
description: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
problem types: Unrestricted Upload of File with Dangerous Type
affected:
{
product: Junos Space
vendor: Juniper Networks
versions:
lessThan: 18.3R1, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
version: 3.0
]
exploits: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
workarounds: Use access lists or firewall filters to limit access to the device's management interface only from trusted hosts and administrators.