CVE-2014-2714

Name: CVE-2014-2714
Creator: NVD / NIST
Published: 2014-04-14T15:09:06.413+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.34%

Last modified Jun 17, 2026

CVE-2014-2714 is a vulnerability of currently unknown severity. The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service (flow daemon crash and restart) via a crafted URL.. EPSS estimates a 2.34% chance of exploitation in the next 30 days.

Description

The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service (flow daemon crash and restart) via a crafted URL.

Metrics

EPSS Probability

2.34%

81.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Juniper	Junos	10.4
Juniper	Junos	11.4
Juniper	Junos	12.1
Juniper	Junos	12.1x44
Juniper	Junos	12.1x45
Juniper	Junos	12.1x46

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10622Vendor Advisory
http://secunia.com/advisories/57835Vendor Advisory
http://securitytracker.com/id?1030060
http://www.securityfocus.com/bid/66760
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10622Vendor Advisory
http://secunia.com/advisories/57835Vendor Advisory
http://securitytracker.com/id?1030060
http://www.securityfocus.com/bid/66760

Timeline

Published: Apr 14, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-2714?

How severe is CVE-2014-2714?

Severity scoring for CVE-2014-2714 is pending analysis. The EPSS model estimates a 2.34% probability of exploitation in the next 30 days.

How do I fix CVE-2014-2714?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-2714?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST