PT-2014-5300 · Juniper Networks · Juniper Nsm

Published 2014-05-19 · Updated 2017-01-07 · CVE-2014-3411

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Juniper NSM versions prior to 2012.2R8

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors. This is related to an unspecified vulnerability in the NSM XDB service.

Recommendations For versions prior to 2012.2R8, update to version 2012.2R8 or later to resolve the issue.

Fix

Related Identifiers

CVE-2014-3411

ZDI-14-297

Affected Products

Juniper Nsm

References · 6

• http://secunia.com/advisories/58684 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-14-297 · Security Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10625 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3411 · Security Note
• http://securityfocus.com/bid/67445 · Note
• http://securitytracker.com/id/1030253 · Note