Juniper SRX3600 vulnerabilities

11 CVEs affecting Juniper SRX3600, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3825, published 2014-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4685, published 2013-07-11. High severity, CVSS 10.0. EPSS: 7.6% chance of exploitation in the next 30 days. Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC…
CVE-2014-0618, published 2014-01-11. High severity, CVSS 7.8. EPSS: 3.6% chance of exploitation in the next 30 days. Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC…
CVE-2014-3817, published 2014-07-11. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 on SRX Series devices, when NAT protocol…
CVE-2013-4684, published 2013-07-11. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a…
CVE-2013-4687, published 2013-07-11. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways (ALGs) are enabled, allows remote attackers…
CVE-2014-0617, published 2014-01-15. High severity, CVSS 7.1. EPSS: 2.3% chance of exploitation in the next 30 days. Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash)…
CVE-2013-4690, published 2013-07-11. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly…
CVE-2014-3825, published 2014-10-14. Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days. The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an…
CVE-2013-4688, published 2013-07-11. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted…
CVE-2014-3815, published 2014-07-11. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service (flowd crash) via a crafted SIP packet.

Latest

CVE-2014-3822, published 2014-07-11. Medium severity, CVSS 5.4. EPSS: 1.7% chance of exploitation in the next 30 days. Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows…