Improper input validation in Juniper Mobile System Software
CVE-2014-6381
Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service (device disconnect) via unspecified vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.005 (42.7th percentile) — read the EPSS interpretation.
Affected products
- Juniper Mobile_system_software — versions 8.0, 8.0.2.2, 8.0.3.6
- Juniper Ringmaster — versions 8.0, 8.0.2.1, 8.0.3.2
- Juniper Smartpass — versions 8.0, 8.0.2.1, 8.0.3.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)