CVE-2013-6014

Published: Oct 28, 2013Modified: Apr 29, 2026

9.3

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

Exploitability: 2.8 / Impact: 5.8

Source: NVD

Description

Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an unnumbered interface, allows remote attackers to perform ARP poisoning attacks and possibly obtain sensitive information via a crafted ARP message.

Affected (10)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 10.4
Juniper Junos	Version 11.4
Juniper Junos	Version 11.4x27
Juniper Junos	Version 12.1
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x45
Juniper Junos	Version 12.2
Juniper Junos	Version 12.3
Juniper Junos	Version 13.1
Juniper Junos	Version 13.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10595

Source: cve@mitre.org

Vendor Advisory

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10595

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.