Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2014-3413

24
FAUCET Score

CVE-2014-3413 describes a critical vulnerability in Juniper Networks Junos Space versions prior to 13.3R1.8, where the embedded MySQL server contains an unspecified account with a hardcoded password. This flaw allows remote attackers to gain unauthorized database access, leading to sensitive information disclosure and ultimately administrative control over the affected system. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, resulting in complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
13.3CPE matchmatch criteria
cpe:2.3:a:juniper:junos_space:13.3:r1.1:*:*:*:*:*:*
13.3CPE matchmatch criteria
cpe:2.3:a:juniper:junos_space:13.3:r1.2:*:*:*:*:*:*
13.3CPE matchmatch criteria
cpe:2.3:a:juniper:junos_space:13.3:r1.3:*:*:*:*:*:*
13.3CPE matchmatch criteria
cpe:2.3:a:juniper:junos_space:13.3:r1.4:*:*:*:*:*:*
13.3CPE matchmatch criteria
cpe:2.3:a:juniper:junos_space:13.3:r1.5:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
2.21%
Probability of exploitation in next 30 days
EPSS Percentile
80.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0221 is in the 70th percentile among its peer group of 36,897 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

envoyvendor investigatingvia llm_extracted
junipervendor investigatingvia nvd_reference
View patch
mozillavendor investigatingvia llm_extracted
pythonvendor investigatingvia llm_extracted

Vendor Advisories (3)

mozillallm-mozilla-a743908b57eaba62HIGH

Juniper Junos Space MySQL Server Unspecified Hardcoded Credentials

May 14, 2014
envoyllm-envoy-0da434b62f8325e5HIGH

Juniper Junos Space MySQL Server Unspecified Hardcoded Credentials

May 14, 2014
pythonllm-python-50d9028af3a7817dHIGH

Juniper Junos Space MySQL Server Unspecified Hardcoded Credentials

May 14, 2014

References

kb.juniper.net / InfoCenter/index
Vendor Advisory
tenable.com / security/research/tra-2014-01
Third Party Advisory