Vulnerability CVE-2013-5650
Published: 2013-09-16   Modified: 2013-09-22

Description:
Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.

Type:

CWE-20

 (Improper Input Validation)

CVSS2 => (AV:N/AC:H/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.4/10
6.9/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Juniper -> Junos pulse access control service 
Juniper -> Junos pulse secure access service 

 References:
https://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=JSA10590
http://secunia.com/advisories/54776
Copyright 2024, cxsecurity.com

 

Back to Top