CVEvulnerability
CVE-2013-5650
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-09-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.4 MEDIUM — AV:N/AC:H/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.
Affected configurations
• juniper junos pulse secure access service 7.1
• juniper junos pulse secure access service 7.2
• juniper junos pulse secure access service 7.3
• juniper junos pulse secure access service 7.4
• juniper junos pulse access control service 4.1
• juniper junos pulse access control service 4.2
• juniper junos pulse access control service 4.3
• juniper junos pulse access control service 4.4
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/97241 osvdb.org
- http://secunia.com/advisories/54776 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87063 exchange.xforce.ibmcloud.com
- https://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=JSA10590 Vendor Advisory
- http://osvdb.org/97241 osvdb.org
- http://secunia.com/advisories/54776 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87063 exchange.xforce.ibmcloud.com
- https://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=JSA10590 Vendor Advisory