Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-3812

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.

Published

2014-06-13T14:55:16.040

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-310
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper ive_os 7.4 Yes
Operating System juniper ive_os 8.0 Yes
Operating System juniper unified_access_control_software 4.4 Yes
Operating System juniper unified_access_control_software 5.0 Yes
Hardware juniper fips_infranet_controller_6500 - Yes
Hardware juniper fips_secure_access_4000 - Yes
Hardware juniper fips_secure_access_4500 - Yes
Hardware juniper fips_secure_access_6000 - Yes
Hardware juniper fips_secure_access_6500 - Yes
Hardware juniper infranet_controller_4000 - Yes
Hardware juniper infranet_controller_4500 - Yes
Hardware juniper infranet_controller_6000 - Yes
Hardware juniper infranet_controller_6500 - Yes
Hardware juniper mag2600_gateway - Yes
Hardware juniper mag4610_gateway - Yes
Hardware juniper mag6610_gateway - Yes
Hardware juniper mag6611_gateway - Yes
Hardware juniper secure_access_2500 - Yes
Hardware juniper secure_access_4500 - Yes
Hardware juniper secure_access_700 - Yes
References