PT-2015-3852

CVE-2014-6383

·

Published

2015-01-16

·

Updated

2015-01-26

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Junos versions 13.3R3, 14.1R1, and 14.1R2
Description The issue is related to the stateless firewall in Junos, which does not properly match ports when using Trio-based PFE modules. This might allow remote attackers to bypass firewall rules.
Recommendations For versions 13.3R3, 14.1R1, and 14.1R2, consider restricting access to the firewall until a patch is available. As a temporary workaround, review and adjust firewall rules to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾