CVE-2014-3411: Critical severity Juniper Network And Security Manager Software vulnerability
Published May 19, 2014
·Updated
Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
20 affected components
Juniper Network And Security Manager Software<=2012.2
Juniper Network And Security Manager Software=2012.2
Juniper Network And Security Manager Software=2012.2-r1
Juniper Network And Security Manager Software=2012.2-r2
Juniper Network And Security Manager Software=2012.2-r3
Juniper Network And Security Manager Software=2012.2-r4
Juniper Network And Security Manager Software=2012.2-r5
Juniper Network And Security Manager Software=2012.2-r6
Juniper Nsm3000
Juniper Nsmexpress
All of the following
Any of the following
Juniper Network And Security Manager Software<=2012.2
Juniper Network And Security Manager Software=2012.2
Juniper Network And Security Manager Software=2012.2-r1
Juniper Network And Security Manager Software=2012.2-r2
Juniper Network And Security Manager Software=2012.2-r3
Juniper Network And Security Manager Software=2012.2-r4
Juniper Network And Security Manager Software=2012.2-r5
Juniper Network And Security Manager Software=2012.2-r6
Any of the following
Juniper Nsm3000
Juniper Nsmexpress
Event History
May 19, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3411?
The severity of CVE-2014-3411 is high as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2014-3411?
To fix CVE-2014-3411, update the Juniper Network and Security Manager software to version 2012.2R8 or later.
3
What versions of Juniper products are affected by CVE-2014-3411?
CVE-2014-3411 affects Juniper Network and Security Manager Software versions prior to 2012.2R8.
4
Can CVE-2014-3411 lead to a complete system compromise?
Yes, CVE-2014-3411 can lead to a complete system compromise due to the ability to execute arbitrary code.
5
Is there a workaround for CVE-2014-3411 if updates cannot be applied immediately?
Currently, there are no documented workarounds for CVE-2014-3411, so applying the update is recommended.