CVE-2013-5650

2013-09-1619:14:39

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-5650

junos pulse

ive

uac

denial of service

dos

ssl

vulnerability

nvd

6.7 Medium

AI Score

Confidence

High

5.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

79.4%

JSON

Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.

Affected configurations

NVD

Node

juniperjunos_pulse_secure_access_serviceMatch7.1

juniperjunos_pulse_secure_access_serviceMatch7.2

juniperjunos_pulse_secure_access_serviceMatch7.3

juniperjunos_pulse_secure_access_serviceMatch7.4

Node

juniperjunos_pulse_access_control_serviceMatch4.1

juniperjunos_pulse_access_control_serviceMatch4.2

juniperjunos_pulse_access_control_serviceMatch4.3

juniperjunos_pulse_access_control_serviceMatch4.4

CPENameOperatorVersion
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.1
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.2
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.3
juniper:junos_pulse_secure_access_servicejuniper junos pulse secure access serviceeq7.4

CPE	Name	Operator	Version
juniper:junos_pulse_secure_access_service	juniper junos pulse secure access service	eq	7.1
juniper:junos_pulse_secure_access_service	juniper junos pulse secure access service	eq	7.2
juniper:junos_pulse_secure_access_service	juniper junos pulse secure access service	eq	7.3
juniper:junos_pulse_secure_access_service	juniper junos pulse secure access service	eq	7.4