Vulnerability Details : CVE-2014-0618
Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2014-0618
Probability of exploitation activity in the next 30 days: 1.58%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 86 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2014-0618
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST |
References for CVE-2014-0618
-
http://www.securityfocus.com/bid/64769
Juniper Junos CVE-2014-0618 Denial of Service Vulnerability
-
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10611
Juniper Networks - 2014-01 Security Bulletin: Junos: SRX flowd crash while processing HTTP traffic when acting as UAC enforcer (CVE-2014-0618)Vendor Advisory
-
http://www.securitytracker.com/id/1029584
Juniper Junos Branch SRX Series HTTP Processing Flaw Lets Remote Users Deny Service - SecurityTracker
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/90238
Juniper Junos HTTP denial of service CVE-2014-0618 Vulnerability Report
Products affected by CVE-2014-0618
- cpe:2.3:o:juniper:junos:10.4:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:11.4:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*