CVE-2014-6381: Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast"…

Description

Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service (device disconnect) via unspecified vectors.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 46% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

MS

Mobile System Software · Juniper

8.0; 8.0.2.2; 8.0.3.6; 9.0; 9.0.2.5; 9.1 · source: NVD

RI

Ringmaster · Juniper

8.0; 8.0.2.1; 8.0.3.2; 9.0; 9.0.2.1; 9.1 · source: NVD

SM

Smartpass · Juniper

8.0; 8.0.2.1; 8.0.3.1; 9.0; 9.1 · source: NVD