VDB
CVE-2014-2285
CVE-2014-2285
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Es existieren mehrere Schwachstellen in verschiedenen Juniper-Produkten. Ursachen sind unter Anderem Ungenügende Eingabeüberprüfungen, Unsachgemäße Überprüfung und Verarbeitung von Paketen, fehlende Speicherfreigaben, fehlerhafte Behandlung von Ausnahmen, Unsachgemäße Speicherbehandlung, unkontrollierter Ressourcenverbrauch, Klartextspeicherung von Daten und Pufferüberläufe. Diese Schwachstellen ermöglichen Angreifern Denial of Service Zustände zu verursachen, Informationen offenzulegen, Code auszuführen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive der Firewall Funktionalität zu umgehen. Zu einer erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder eine Interaktion des Nutzers notwendig.
EPSS 3.33% · 87.5th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
3.33%
87.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open Source | Open Source Net-SNMP | |
| Dell | Dell NetWorker <19.11.0.6 | |
| Dell | Dell NetWorker <19.12.0.1 | |
| Juniper | Juniper JUNOS |
Exploit Intelligence
- A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure (CVE-1999-0524). (github-poc)
- A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure (CVE-1999-0524). (github-poc)
- A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure (CVE-1999-0524). (github-poc)
- A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure (CVE-1999-0524). (github-poc)
- A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure (CVE-1999-0524). (github-poc)
- A reconnaissance tool to detect CVE-1999-0524 (ICMP Timestamp Disclosure) by automating timestamp extraction via nping or hping3. Converts raw ICMP timestamps into human-readable remote system times for vulnerability validation. (github-poc)
- A reconnaissance tool to detect CVE-1999-0524 (ICMP Timestamp Disclosure) by automating timestamp extraction via nping or hping3. Converts raw ICMP timestamps into human-readable remote system times for vulnerability validation. (github-poc)
- A reconnaissance tool to detect CVE-1999-0524 (ICMP Timestamp Disclosure) by automating timestamp extraction via nping or hping3. Converts raw ICMP timestamps into human-readable remote system times for vulnerability validation. (github-poc)
- A reconnaissance tool to detect CVE-1999-0524 (ICMP Timestamp Disclosure) by automating timestamp extraction via nping or hping3. Converts raw ICMP timestamps into human-readable remote system times for vulnerability validation. (github-poc)
- A reconnaissance tool to detect CVE-1999-0524 (ICMP Timestamp Disclosure) by automating timestamp extraction via nping or hping3. Converts raw ICMP timestamps into human-readable remote system times for vulnerability validation. (github-poc)
…and 5 more exploits
Timeline
- Apr 27, 2014 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 16, 2023 EPSS Score
- Sep 7, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1591.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1591 advisory
- https://supportportal.juniper.net/s/global-search/%40uri?language=en_US#sort=%40sfcec_community_publish_date_formula__c%20descending&numberOfResults=100&f:ctype=%5BSecurity%20Advisories%5D advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2014/wid-sec-w-2025-1694.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1694 advisory
- http://seclists.org/oss-sec/2014/q1/506 advisory
- http://rhn.redhat.com/errata/RHSA-2014-0322.html advisory
- http://rhn.redhat.com/errata/RHSA-2014-0321.html advisory
- http://www.ubuntu.com/usn/usn-2166-1/ advisory
- https://www.suse.com/support/update/announcement/2014/suse-su-20140524-1.html advisory
- http://www.gentoo.org/security/en/glsa/glsa-201409-02.xml advisory
- https://blogs.oracle.com/sunsecurity/entry/cve_2014_2285_input_validation advisory
- http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A092/ advisory
- https://www.dell.com/support/kbdoc/000337925 advisory