PT-2015-3852 · Juniper Networks · Junos

Published 2015-01-16 · Updated 2015-01-26 · CVE-2014-6383

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Junos versions 13.3R3, 14.1R1, and 14.1R2

Description The issue is related to the stateless firewall in Junos, which does not properly match ports when using Trio-based PFE modules. This might allow remote attackers to bypass firewall rules.

Recommendations For versions 13.3R3, 14.1R1, and 14.1R2, consider restricting access to the firewall until a patch is available. As a temporary workaround, review and adjust firewall rules to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

CVE-2014-6383

Affected Products

Junos

References · 4

• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-6383 · Security Note
• http://securityfocus.com/bid/72071 · Note
• http://securitytracker.com/id/1031549 · Note