CVE-2014-6383 - The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE module

CVE-2014-6383

Summary

The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule.

References

http://www.securityfocus.com/bid/72071
http://www.securitytracker.com/id/1031549
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10666

Vulnerable Configurations

cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.3:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 26-01-2015 - 19:35)
Impact:
Exploitability:

CWE

CWE-17

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:P/A:N

refmap via4

bid	72071
confirm	https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10666
sectrack	1031549

Last major update

26-01-2015 - 19:35

Published

16-01-2015 - 16:59

Last modified

26-01-2015 - 19:35