Improper input validation in Juniper Junos

CVE-2013-6015

Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to c…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.007 (72.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
  • 1029177 (vdb-entry, x_refsource_SECTRACK)
  • 98368 (x_refsource_OSVDB, vdb-entry)
  • 55218 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)