CVE-2013-5650

CWE-20 — Improper Input Validation4 documents4 sources
Severity
5.4MEDIUM
EPSS
0.7%
top 28.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Juniper Junos Pulse Access Control ServiceJuniper Junos Pulse Secure Access Service
Timeline
PublishedSep 16
Latest updateMay 17

Description

Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.

CVSS vector

AV:N/AC:H/C:N/I:N/A:CExploitability: 4.9 | Impact: 6.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-49q8-f85j-7fq7: Junos Pulse Secure Access Service (IVE) 7↗2022-05-17
▶
CVEList
CVE-2013-5650: Junos Pulse Secure Access Service (IVE) 7↗2013-09-16
▶

📋Vendor Advisories

1
Juniper
CVE-2013-5650: Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Ser↗2013-09-16
▶