CVE-2013-5650

Medium

Description

Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.

SeverityMedium
CVSS5.4
Exploit probability—
ProductJuniper Junos Pulse Secure Access Service
PublishedSep 16, 2013
First seenSep 16, 2013

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
juniper junos_pulse_secure_access_service7.1, 7.2, 7.3, 7.4—
juniper junos_pulse_access_control_service4.1, 4.2, 4.3, 4.4—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.