« Volver al listado

CVE-2014-3812

Estado: ModificadaMedia (5)—

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (18)

Juniper — Fips Infranet Controller 6500Juniper — Fips Secure Access 4000Juniper — Fips Secure Access 4500Juniper — Fips Secure Access 6000Juniper — Fips Secure Access 6500Juniper — Infranet Controller 4000Juniper — Infranet Controller 4500Juniper — Infranet Controller 6000Juniper — Infranet Controller 6500Juniper — IVE OSJuniper — Mag2600 GatewayJuniper — Mag4610 GatewayJuniper — Mag6610 GatewayJuniper — Mag6611 GatewayJuniper — Secure Access 2500Juniper — Secure Access 4500Juniper — Secure Access 700Juniper — Unified Access Control Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3812",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-06-13T14:55:16.040",
  "references": [
    {
      "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network."
    },
    {
      "lang": "es",
      "value": "Los dispositivos Juniper Junos Pulse Secure Access Service (SSL VPN) con IVE OS anterior a 7.4r5 y 8.x anterior a 8.0r1 y Junos Pulse Access Control Service (UAC) anterior a 4.4r5 y 5.x anterior a 5.0r1 habilitan suites de cifrado con algoritmos de codificación débiles, lo que facilita a atacantes remotos obtener información sensible mediante la captura de trafico de red."
    }
  ],
  "lastModified": "2026-06-17T00:08:55.500",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:ive_os:7.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7F2DEC8-F096-4519-B194-2D1B0FFB8D0D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:ive_os:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "536AF492-C6FF-4C5F-A5DF-DA14DFE8A41F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:unified_access_control_software:4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9385034-54D6-4EA1-953C-3F1A32FB8B7A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:unified_access_control_software:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98D9A201-54F7-4CAE-B3B8-0BEC64DAA696"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:fips_infranet_controller_6500:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4B171E2-3E7D-42CE-8F16-0C232222EC63"
            },
            {
              "criteria": "cpe:2.3:h:juniper:fips_secure_access_4000:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80CC7A54-95DD-4C60-8A99-21F800616784"
            },
            {
              "criteria": "cpe:2.3:h:juniper:fips_secure_access_4500:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B68C4310-771E-4E8F-9C62-6EBE233FCB92"
            },
            {
              "criteria": "cpe:2.3:h:juniper:fips_secure_access_6000:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "55331F37-6F9B-48A8-BBB3-BE9EBF4C2B3D"
            },
            {
              "criteria": "cpe:2.3:h:juniper:fips_secure_access_6500:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "528028F3-3F3F-4354-A1D7-2EF66BA27CEC"
            },
            {
              "criteria": "cpe:2.3:h:juniper:infranet_controller_4000:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D39E3026-7E64-4201-8801-5138C52EA3BE"
            },
            {
              "criteria": "cpe:2.3:h:juniper:infranet_controller_4500:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1220A6C-A397-4BDD-A7D1-BF16BC35CE4A"
            },
            {
              "criteria": "cpe:2.3:h:juniper:infranet_controller_6000:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "602D3D3E-6859-4E6D-AF61-D58D26C78E65"
            },
            {
              "criteria": "cpe:2.3:h:juniper:infranet_controller_6500:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4384E5A3-9D09-4340-943A-BB3408D85B8D"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mag2600_gateway:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EE557B9-DF6D-4C20-98BE-E934D187CCFC"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mag4610_gateway:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB174F88-B643-4338-BCD6-A9CD0EDB54A6"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mag6610_gateway:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "115C8834-8BD1-4561-8B98-AE29E3B9C1C9"
            },
            {
              "criteria": "cpe:2.3:h:juniper:mag6611_gateway:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54C5F933-61BB-40EA-9ADC-C22CFE8F9D1B"
            },
            {
              "criteria": "cpe:2.3:h:juniper:secure_access_2500:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82E5E8BD-68B9-4C94-A1F0-3F5C3EC7620A"
            },
            {
              "criteria": "cpe:2.3:h:juniper:secure_access_4500:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "641091CF-F671-4AD7-B10F-E50497AC462B"
            },
            {
              "criteria": "cpe:2.3:h:juniper:secure_access_700:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42FB27DD-D685-4D5E-8DAF-7A34DE33AB59"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}