CVE-2017-2303

highpriority · track · 31EPSS 0.021 · 82 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.13% (82nd) EPSS

CVSS 7.8 · high

Is it mine?

39 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-28

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R5, 15.1 prior to 15.1F6 or 15.1R3, 15.1X49 prior to 15.1X49-D30 or 15.1X49-D40, 15.1X53 prior to 15.1X53-D35, and where RIP is enabled, certain RIP advertisements received by the router may cause the RPD daemon to crash resulting in a denial of service condition.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.8

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 10 · impact 6.9

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Csecondary · FSTEC (BDU) RU

v3.06.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-19US

affected products (39)

Products and version ranges known to be affected.

Juniper Networks Junos OS where RIP is enabled≤ 12.3 prior to 12.3R13enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 12.1X46 prior to 12.1X46-D50enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 14.2 prior to 14.2R5enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 14.1X53 prior to 14.1X53-D35enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 13.2X51 prior to 13.2X51-D40enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 12.3X48 prior to 12.3X48-D30enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 16.1R1 and all subsequent releases have fix.enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 15.1X49 prior to 15.1X49-D30 or 15.1X49-D40,enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 13.3 prior to 13.3R10enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 12.1X47 prior to 12.1X47-D40enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 14.1 prior to 14.1R8enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 14.1X55 prior to 14.1X55-D35enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 15.1X53 prior to 15.1X53-D35enisa_euvdEU
Juniper Networks Junos OS where RIP is enabled≤ 15.1 prior to 15.1F6 or 15.1R3enisa_euvdEU
Juniper Networks Inc. JunOS≤ 15.1x53:d30fstec_bduRU
Juniper Networks Inc. JunOS≤ 15.1x49:d25fstec_bduRU
Juniper Networks Inc. JunOS≤ 15.1r2fstec_bduRU
Juniper Networks Inc. JunOS≤ 14.2r4fstec_bduRU
Juniper Networks Inc. JunOS≤ 14.1x55:d30fstec_bduRU
Juniper Networks Inc. JunOS≤ 14.1x53:d30fstec_bduRU

showing 20 of 39

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2017-05-30modified 2026-06-17

references (12)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan