CVE-2013-5650

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-16 · updated 2026-06-16
Weakness: CWE-20

Description

Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.

Affected products

Juniper Junos Pulse Access Control Service: 4.1, 4.2, 4.3, 4.4
Juniper Junos Pulse Secure Access Service: 7.1, 7.2, 7.3, 7.4

References

http://osvdb.org/97241
http://secunia.com/advisories/54776
https://exchange.xforce.ibmcloud.com/vulnerabilities/87063
https://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=JSA10590
http://osvdb.org/97241
http://secunia.com/advisories/54776
https://exchange.xforce.ibmcloud.com/vulnerabilities/87063
https://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=JSA10590

Get alerted when CVE-2013-5650 or the next vulnerability affects your stack