CVE-2017-10603: Junos OS: Local XML Injection through CLI command can lead to privilege escalation

Security readout for executives and security teams

This vulnerability lets a low-privileged local user on specific Junos OS releases potentially become root through XML injection in the CLI. The risk is serious because successful exploitation compromises the underlying network device, but exposure requires authenticated local access and high attack complexity. Exposure is limited to Juniper Networks Junos OS devices running the affected 15.1X53 or 15.1 trains. The attacker must already have local authenticated access, so risk is highest on devices with broad administrator access, shared accounts, or weak operational controls. Treat this as a high-priority maintenance and access-control issue for affected Junos devices. It is not described as remotely exploitable, but root compromise of routing or security infrastructure can create major operational risk if local accounts are abused. Mitigation focus: Upgrade affected Junos OS 15.1X53 systems to 15.1X53-D47 or later.; Upgrade affected Junos OS 15.1 systems to 15.1R3 or later.; Restrict local CLI access to trusted administrators only..

Prepared

May 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.