CVE-2014-0613: The XNM command processor in Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2...

Security readout for executives and security teams

CVE-2014-0613 is a Juniper Junos denial-of-service issue. If XNM over SSL or clear text is enabled on affected legacy Junos releases, a remote attacker may force memory consumption and disrupt device availability. The provided sources do not include CVSS scoring, active exploitation, or detailed exploit conditions. Exposure is most likely on legacy Junos devices that still run affected releases and have xnm-ssl or xnm-clear-text enabled. The bundle does not identify affected hardware platforms, default service state, or internet exposure requirements. Treat this as a targeted availability risk for legacy Juniper infrastructure. Prioritize externally reachable or business-critical routing and switching devices, especially where XNM services remain enabled. Mitigation focus: Upgrade Junos to the fixed release listed for the deployed branch.; Disable xnm-ssl and xnm-clear-text if not operationally required.; Restrict management-plane access to trusted administration networks..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.