Summary
Denial of Service Vulnerability for new dynamic VPN connections.
Impact
A remote unauthenticated user may cause a denial of service condition where new Dynamic VPN connections may fail for other users.
Solution
New builds of Junos OS software are available from Juniper. As a workaround disable dynamic IPSec VPN.
Insight
On Branch SRX Series service gateways, when Dynamic IPsec VPN is configured, a remote unauthenticated user may cause a denial of service condition where new Dynamic VPN connections may fail for other users. This issue may also lead to high CPU consumption and disk usage which may cause other complications.
Affected
Junos OS 11.4 and 12.1.
Detection
Check the OS build.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2014-0612 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities