PT-2015-3852
CVE-2014-6383
·
Published
2015-01-16
·
Updated
2015-01-26
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Junos versions 13.3R3, 14.1R1, and 14.1R2
Description
The issue is related to the stateless firewall in Junos, which does not properly match ports when using Trio-based PFE modules. This might allow remote attackers to bypass firewall rules.
Recommendations
For versions 13.3R3, 14.1R1, and 14.1R2, consider restricting access to the firewall until a patch is available.
As a temporary workaround, review and adjust firewall rules to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾