CVE-2014-6381

Severity CVSS v4.0:
Pending analysis
Type:
CWE-20 Input Validation
Publication date:
12/12/2014
Last modified:
12/04/2025

Description

Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service (device disconnect) via unspecified vectors.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:juniper:smartpass:8.0:*:*:*:*:*:*:*
cpe:2.3:a:juniper:smartpass:8.0.2.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:smartpass:8.0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:smartpass:9.0:*:*:*:*:*:*:*
cpe:2.3:a:juniper:smartpass:9.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:mobile_system_software:8.0:*:*:*:*:*:*:*
cpe:2.3:a:juniper:mobile_system_software:8.0.2.2:*:*:*:*:*:*:*
cpe:2.3:a:juniper:mobile_system_software:8.0.3.6:*:*:*:*:*:*:*
cpe:2.3:a:juniper:mobile_system_software:9.0:*:*:*:*:*:*:*
cpe:2.3:a:juniper:mobile_system_software:9.0.2.5:*:*:*:*:*:*:*
cpe:2.3:a:juniper:mobile_system_software:9.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:ringmaster:8.0:*:*:*:*:*:*:*
cpe:2.3:a:juniper:ringmaster:8.0.2.1:*:*:*:*:*:*:*
cpe:2.3:a:juniper:ringmaster:8.0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:juniper:ringmaster:9.0:*:*:*:*:*:*:*