9.3

CVE-2013-6014

Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an unnumbered interface, allows remote attackers to perform ARP poisoning attacks and possibly obtain sensitive information via a crafted ARP message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 10.4
Juniper ≫ Junos Version 11.4
Juniper ≫ Junos Version 11.4x27
Juniper ≫ Junos Version 12.1
Juniper ≫ Junos Version 12.1x44
Juniper ≫ Junos Version 12.1x45
Juniper ≫ Junos Version 12.2
Juniper ≫ Junos Version 12.3
Juniper ≫ Junos Version 13.1
Juniper ≫ Junos Version 13.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.85% 0.533
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 2.8 5.8
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
NIST 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:C/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10595
Vendor Advisory