CVE-2014-6451 : J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of se

J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service (system reboot) via unspecified vectors.

Published 2015-10-16 20:59:03

Updated 2016-12-08 03:06:10

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2014-6451

EPSS FAQ

0.24%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-6451

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2014-6451

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10700

Juniper Networks - 2015-10 Security Bulletin: Junos: J-Web in SRX5000-Series: A remote attacker can cause a denial of service to SRX5000-Series when J-Web is enabled causing the SRX to enter debug pro
Vendor Advisory
http://www.securitytracker.com/id/1033857

Juniper vSRX-Series Junos J-Web Lets Remote Users Cause the Target System to Crash - SecurityTracker

Products affected by CVE-2014-6451

Juniper » Junos » Update D10
Versions up to, including, (<=) 15.1x49
cpe:2.3:o:juniper:junos:*:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Vsrx

Vulnerability Details : CVE-2014-6451

Exploit prediction scoring system (EPSS) score for CVE-2014-6451

CVSS scores for CVE-2014-6451

References for CVE-2014-6451

Products affected by CVE-2014-6451