PT-2015-3852 · Juniper Networks · Junos

Publicado 2015-01-16 · Atualizado 2015-01-26 · CVE-2014-6383

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Junos versions 13.3R3, 14.1R1, and 14.1R2

Description The issue is related to the stateless firewall in Junos, which does not properly match ports when using Trio-based PFE modules. This might allow remote attackers to bypass firewall rules.

Recommendations For versions 13.3R3, 14.1R1, and 14.1R2, consider restricting access to the firewall until a patch is available. As a temporary workaround, review and adjust firewall rules to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

CVE-2014-6383

Produtos afetados

Junos

Referências · 4

• http://securityfocus.com/bid/72071 · Nota
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10666 · Aviso do Fabricante
• http://securitytracker.com/id/1031549 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-6383 · Nota de Segurança