CVE-2014-3812

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by sniffing the network.

Published: 2014-06-13 Last update: 2026-05-06 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2014-3812 is rated Low Risk (38/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.74%). Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2014-3812

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.19% 0.74% +0.56%
2 2023-03-07 1.05% 0.19% -0.86%
3 2022-02-04 — 1.05% —

Full EPSS history (3 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2014-3812

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.0 2.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:N)
No availability impact.
 10.0 2.9 [email protected]

Weakness enumeration for CVE-2014-3812

Affected software / configurations for CVE-2014-3812

Vendor Product Version Raw CPE
juniper ive_os 7.4 cpe:2.3:o:juniper:ive_os:7.4:*:*:*:*:*:*:*
juniper ive_os 8.0 cpe:2.3:o:juniper:ive_os:8.0:*:*:*:*:*:*:*
juniper unified_access_control_software 4.4 cpe:2.3:o:juniper:unified_access_control_software:4.4:*:*:*:*:*:*:*
juniper unified_access_control_software 5.0 cpe:2.3:o:juniper:unified_access_control_software:5.0:*:*:*:*:*:*:*
juniper fips_infranet_controller_6500 — cpe:2.3:h:juniper:fips_infranet_controller_6500:-:*:*:*:*:*:*:*
juniper fips_secure_access_4000 — cpe:2.3:h:juniper:fips_secure_access_4000:-:*:*:*:*:*:*:*
juniper fips_secure_access_4500 — cpe:2.3:h:juniper:fips_secure_access_4500:-:*:*:*:*:*:*:*
juniper fips_secure_access_6000 — cpe:2.3:h:juniper:fips_secure_access_6000:-:*:*:*:*:*:*:*
juniper fips_secure_access_6500 — cpe:2.3:h:juniper:fips_secure_access_6500:-:*:*:*:*:*:*:*
juniper infranet_controller_4000 — cpe:2.3:h:juniper:infranet_controller_4000:-:*:*:*:*:*:*:*
juniper infranet_controller_4500 — cpe:2.3:h:juniper:infranet_controller_4500:-:*:*:*:*:*:*:*
juniper infranet_controller_6000 — cpe:2.3:h:juniper:infranet_controller_6000:-:*:*:*:*:*:*:*
juniper infranet_controller_6500 — cpe:2.3:h:juniper:infranet_controller_6500:-:*:*:*:*:*:*:*
juniper mag2600_gateway — cpe:2.3:h:juniper:mag2600_gateway:-:*:*:*:*:*:*:*
juniper mag4610_gateway — cpe:2.3:h:juniper:mag4610_gateway:-:*:*:*:*:*:*:*
juniper mag6610_gateway — cpe:2.3:h:juniper:mag6610_gateway:-:*:*:*:*:*:*:*
juniper mag6611_gateway — cpe:2.3:h:juniper:mag6611_gateway:-:*:*:*:*:*:*:*
juniper secure_access_2500 — cpe:2.3:h:juniper:secure_access_2500:-:*:*:*:*:*:*:*
juniper secure_access_4500 — cpe:2.3:h:juniper:secure_access_4500:-:*:*:*:*:*:*:*
juniper secure_access_700 — cpe:2.3:h:juniper:secure_access_700:-:*:*:*:*:*:*:*

References for CVE-2014-3812

cvelogic Threat Intelligence