5

CVE-2014-3812

EPSS 0.18%
Published 13.06.2014 14:55:16
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.

Affected products Warnungen 0 Metrics 2 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Ive Os Version7.4

Juniper ≫ Ive Os Version8.0

Juniper ≫ Unified Access Control Software Version4.4

Juniper ≫ Unified Access Control Software Version5.0

Juniper ≫ Fips Infranet Controller 6500 Version-

Juniper ≫ Fips Secure Access 4000 Version-

Juniper ≫ Fips Secure Access 4500 Version-

Juniper ≫ Fips Secure Access 6000 Version-

Juniper ≫ Fips Secure Access 6500 Version-

Juniper ≫ Infranet Controller 4000 Version-

Juniper ≫ Infranet Controller 4500 Version-

Juniper ≫ Infranet Controller 6000 Version-

Juniper ≫ Infranet Controller 6500 Version-

Juniper ≫ Mag2600 Gateway Version-

Juniper ≫ Mag4610 Gateway Version-

Juniper ≫ Mag6610 Gateway Version-

Juniper ≫ Mag6611 Gateway Version-

Juniper ≫ Secure Access 2500 Version-

Juniper ≫ Secure Access 4500 Version-

Juniper ≫ Secure Access 700 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.18%	0.368

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-3812

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3812

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3812

EUVD