Unscored severity · published Sep 16, 2013
CVE-2013-5650
Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JP
Junos Pulse Access Control Service · Juniper
4.1; 4.2; 4.3; 4.4 · source: NVD
JP
Junos Pulse Secure Access Service · Juniper
7.1; 7.2; 7.3; 7.4 · source: NVD
Affected product
JP
Junos Pulse Access Control Service
Juniper
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5650
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5650
osvdb.org
http://osvdb.org/97241
Vendor Advisory
http://secunia.com/advisories/54776
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/87063
Vendor Advisory
https://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=JSA10590
More from Junos Pulse Access Control Service
–
CVE-2014-3820
Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 7.1 before 7.1r16, 7.4 before…
–
CVE-2013-3970
Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1…