CVE-2013-4686

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-07-11 · updated 2026-06-16

Description

The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows remote attackers to cause a denial of service (device crash) via a crafted ARP request, aka PR 842091.

Affected products

Juniper Junos OS: 10.4, 11.4, 11.4x27, 12.1, 12.1x44, 12.2 (+1)

References

http://kb.juniper.net/JSA10576
http://secunia.com/advisories/54119
http://www.securityfocus.com/bid/61126
http://kb.juniper.net/JSA10576
http://secunia.com/advisories/54119
http://www.securityfocus.com/bid/61126

Get alerted when CVE-2013-4686 or the next vulnerability affects your stack