CVE-2014-2714 — Improper Input Validation in Juniper Junos

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.1HIGHNVD
EPSS
0.7%
top 27.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Juniper JunosJuniper Junos OSJuniper SRX Series
Timeline
PublishedApr 14
Latest updateMay 17

Description

The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service (flow daemon crash and restart) via a crafted URL.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages3 packages

▶NVDjuniper/junos6 versions+5

🔴Vulnerability Details

1
GHSA
GHSA-6cgf-373g-g523: The Enhanced Web Filtering (EWF) in Juniper Junos before 10↗2022-05-17
▶

📋Vendor Advisories

1
Juniper
CVE-2014-2714: The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 1↗2014-04-14
▶