Vulnerability Details : CVE-2013-4688
flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MSRPC requests, aka PR 772834.
Vulnerability category: Denial of service
Products affected by CVE-2013-4688
- cpe:2.3:o:juniper:junos:10.4:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-4688
0.76%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 72 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-4688
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST |
References for CVE-2013-4688
-
http://kb.juniper.net/JSA10578
Juniper Networks - 2013-07 Security Bulletin: Junos: SRX flowd core while processing MSRPC messages (CVE-2013-4688)Vendor Advisory
-
http://www.securityfocus.com/bid/61124
Juniper Networks Junos CVE-2013-4688 Denial of Service Vulnerability
Jump to