CVE-2014-3812

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.74%

Published

Jun 13, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.

Weaknesses (CWE)

CWE-310

Affected Products (20)

juniper · ive_osvulnerable

juniper · unified_access_control_softwarevulnerable

juniper · fips_infranet_controller_6500vulnerable

juniper · fips_secure_access_4000vulnerable

juniper · fips_secure_access_4500vulnerable

juniper · fips_secure_access_6000vulnerable

juniper · fips_secure_access_6500vulnerable

juniper · infranet_controller_4000vulnerable

juniper · infranet_controller_4500vulnerable

juniper · infranet_controller_6000vulnerable

juniper · infranet_controller_6500vulnerable

juniper · mag2600_gatewayvulnerable

juniper · mag4610_gatewayvulnerable

juniper · mag6610_gatewayvulnerable

juniper · mag6611_gatewayvulnerable

juniper · secure_access_2500vulnerable

juniper · secure_access_4500vulnerable

juniper · secure_access_700vulnerable

References (2)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628

Vendor Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10628

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs