CVEvulnerability
CVE-2014-6381
2.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.9 LOW — AV:A/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service (device disconnect) via unspecified vectors.
Affected configurations
• juniper smartpass 8.0
• juniper smartpass 8.0.2.1
• juniper smartpass 8.0.3.1
• juniper smartpass 9.0
• juniper smartpass 9.1
• juniper mobile system software 8.0
• juniper mobile system software 8.0.2.2
• juniper mobile system software 8.0.3.6
• juniper mobile system software 9.0
• juniper mobile system software 9.0.2.5
• juniper mobile system software 9.1
• juniper ringmaster 8.0
• juniper ringmaster 8.0.2.1
• juniper ringmaster 8.0.3.2
• juniper ringmaster 9.0
• juniper ringmaster 9.0.2.1
• juniper ringmaster 9.1
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/71612 www.securityfocus.com
- http://www.securitytracker.com/id/1031360 www.securitytracker.com
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10662 Vendor Advisory
- http://www.securityfocus.com/bid/71612 www.securityfocus.com
- http://www.securitytracker.com/id/1031360 www.securitytracker.com
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10662 Vendor Advisory