CVE-2013-5650: Juniper Junos Pulse Access Control Service

Medium severity, CVSS 5.4. EPSS: 1.8% chance of exploitation in the next 30 days.

Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.

Affected products

• Juniper Junos Pulse Access Control Service: version 4.1 only; version 4.2 only; version 4.3 only; version 4.4 only
• Juniper Junos Pulse Secure Access Service: version 7.1 only; version 7.2 only; version 7.3 only; version 7.4 only

Published 2013-09-16. Last modified 2026-06-16.