SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2014-3825

The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway (ALG) is enabled, allows remote…

MEDIUM 6.8EPSS 2.04%

Does this matter?

Lower severity and a low EPSS score (2.04%). Track it; it rarely justifies an emergency change on its own.

Description

The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted packet.

CVSS 2.0
6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
2.04% probability · 80th percentile
CISA KEV
Not listed
Weakness
CWE-20
Affected
juniper/junos · juniper/srx100 · juniper/srx110 · juniper/srx1400 · juniper/srx210 · juniper/srx220 · juniper/srx240 · juniper/srx3400 · juniper/srx3600 · juniper/srx550 · juniper/srx5600 · juniper/srx5800 · juniper/srx650
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.