CVE-2014-3814

CWE-20 — Improper Input Validation4 documents4 sources
Severity
7.8HIGH
EPSS
0.5%
top 34.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Juniper Screenos
Timeline
PublishedJun 13
Latest updateMay 17

Description

The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service (crash and reboot) via a sequence of malformed packets to the device IP.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

▶NVDjuniper/screenos6.3.0+3

🔴Vulnerability Details

2
GHSA
GHSA-xm38-rqgf-xhmp: The Juniper Networks NetScreen Firewall devices with ScreenOS before 6↗2022-05-17
▶
CVEList
CVE-2014-3814: The Juniper Networks NetScreen Firewall devices with ScreenOS before 6↗2014-06-13
▶

📋Vendor Advisories

1
Juniper
CVE-2014-3814: The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote atta↗2014-06-13
▶
CVE-2014-3814 (HIGH CVSS 7.8) | The Juniper Networks NetScreen Fire | cvebase.io