CVE-2013-4685 Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforc...
HighCVSS 10.0
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | = 10.4 | No fix listed |
| juniper junos | = 11.4 | No fix listed |
| juniper junos | = 12.1 | No fix listed |
| juniper junos | = 12.1x44 | No fix listed |
| juniper srx100 | All versions | No fix listed |
| juniper srx110 | All versions | No fix listed |
| juniper srx1400 | All versions | No fix listed |
| juniper srx210 | All versions | No fix listed |
| juniper srx220 | All versions | No fix listed |
| juniper srx240 | All versions | No fix listed |
| juniper srx3400 | All versions | No fix listed |
| juniper srx3600 | All versions | No fix listed |
| juniper srx550 | All versions | No fix listed |
| juniper srx5600 | All versions | No fix listed |
| juniper srx5800 | All versions | No fix listed |
| juniper srx650 | All versions | No fix listed |
References
- kb.juniper.net vendor-advisory
- 95108 vdb-entry
- 61125 vdb-entry