CVE-2017-2343
CriticalSummary
The Integrated User Firewall (UserFW) feature in Junos OS version 12.1X47-D10 on Juniper SRX devices introduced integration of user profiles with existing firewall policies. During a security review, hardcoded credentials were identified and removed, which can impact both SRX devices and integrated LDAP and Active Directory points.
Risk Assessment
An attacker may be able to completely compromise SRX devices as well as Active Directory servers and services, potentially gaining access to user credentials and other network resources.
Recommendation
It is recommended to update to the latest version of Junos OS and review the security configurations of Active Directory and SRX to minimize the risk of unauthorized access.
Original NVD description (English source)
The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user profiles on top of the existing firewall polices. As part of an internal security review of the UserFW services authentication API, hardcoded credentials were identified and removed which can impact both the SRX Series device, and potentially LDAP and Active Directory integrated points. An attacker may be able to completely compromise SRX Series devices, as well as Active Directory servers and services. When Active Directory is compromised, it may allow access to user credentials, workstations, servers performing other functions such as email, database, etc. Inter-Forest Active Directory deployments may also be at risk as the attacker may gain full administrative control over one or more Active Directories depending on the credentials supplied by the administrator of the AD domains and SRX devices performing integrated auth