Unscored severity · published May 20, 2014
CVE-2014-3412
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors
–
CVSS
4.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Junos Space · Juniper
through 13.1; 1.0; 1.1; 1.2; 1.3; 1.4; +8 more · source: NVD
JS
Junos Space Ja1500 Appliance · Juniper
All versions, or not specified · source: NVD
JS
Junos Space Ja2500 Appliance · Juniper
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3412
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3412
Vendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10626
www.securityfocus.com
http://www.securityfocus.com/bid/67454
www.securitytracker.com
http://www.securitytracker.com/id/1030254
More from Junos Space
9.8
CVE-2014-3413
The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive…
9.8
CVE-2017-10622
An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any…
9.8
CVE-2016-1265
A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross…
9.8
CVE-2016-4926
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative…
9.0
CVE-2025-59978
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to store script tags…