PT-2015-3852
CVE-2014-6383
·
Publicado
2015-01-16
·
Atualizado
2015-01-26
Descrição por
CVSS 2.0
5.0
MédiaMétricasAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Junos versions 13.3R3, 14.1R1, and 14.1R2
Description
The issue is related to the stateless firewall in Junos, which does not properly match ports when using Trio-based PFE modules. This might allow remote attackers to bypass firewall rules.
Recommendations
For versions 13.3R3, 14.1R1, and 14.1R2, consider restricting access to the firewall until a patch is available.
As a temporary workaround, review and adjust firewall rules to minimize the risk of exploitation.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾