PT-2014-7202 · Juniper Networks · Juniper Wlc

Publicado

2014-12-12

·

Atualizado

2014-12-16

·

CVE-2014-6381

CVSS v2.0

2.9

Baixa

VetorAV:A/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Juniper WLC devices with WLAN Software versions 8.0.x through 8.0.3 Juniper WLC devices with WLAN Software versions 9.0.x through 9.0.2.10 Juniper WLC devices with WLAN Software versions 9.0.3.x through 9.0.3.4 Juniper WLC devices with WLAN Software versions 9.1.x through 9.1.0
Description The issue allows remote attackers to cause a denial of service, resulting in device disconnect, when Proxy ARP or No Broadcast features are enabled in a clustered setup. This can be achieved via unspecified vectors.
Recommendations For versions 8.0.x through 8.0.3, update to version 8.0.4 or later. For versions 9.0.x through 9.0.2.10, update to version 9.0.2.11 or later. For versions 9.0.3.x through 9.0.3.4, update to version 9.0.3.5 or later. For versions 9.1.x through 9.1.0, update to version 9.1.1 or later.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-6381

Produtos afetados

Juniper Wlc