PT-2014-7202 · Juniper Networks · Juniper Wlc

Published 2014-12-12 · Updated 2014-12-16 · CVE-2014-6381

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Low

Base vector

AV:A/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Juniper WLC devices with WLAN Software versions 8.0.x through 8.0.3 Juniper WLC devices with WLAN Software versions 9.0.x through 9.0.2.10 Juniper WLC devices with WLAN Software versions 9.0.3.x through 9.0.3.4 Juniper WLC devices with WLAN Software versions 9.1.x through 9.1.0

Description The issue allows remote attackers to cause a denial of service, resulting in device disconnect, when Proxy ARP or No Broadcast features are enabled in a clustered setup. This can be achieved via unspecified vectors.

Recommendations For versions 8.0.x through 8.0.3, update to version 8.0.4 or later. For versions 9.0.x through 9.0.2.10, update to version 9.0.2.11 or later. For versions 9.0.3.x through 9.0.3.4, update to version 9.0.3.5 or later. For versions 9.1.x through 9.1.0, update to version 9.1.1 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-6381

Affected Products

Juniper Wlc

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-6381 · Security Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10662 · Vendor Advisory
• http://securitytracker.com/id/1031360 · Note
• http://securityfocus.com/bid/71612 · Note