CVE-2020-1628

Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an EX4300 switch, leaking configuration information such as heartbeats, kernel versions, etc. out to the Internet, leading to an information exposure vulnerability. This issue affects Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D53 on EX4300; 15.1 versions prior to 15.1R7-S6 on EX4300; 15.1X49 versions prior to 15.1X49-D200, 15.1X49-D210 on EX4300; 16.1 versions prior to 16.1R7-S7 on EX4300; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2 on EX4300; 17.2 versions prior to 17.2R3-S3 on EX4300; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7 on EX4300; 17.4 versions prior to 17.4R2-S9, 17.4R3 on EX4300; 18.1 versions prior to 18.1R3-S8 on EX4300; 18.2 versions prior to 18.2R3-S2 on EX4300; 18.3 versions prior to 18.3R2-S3, 18.3R3, 18.3R3-S1 on EX4300; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3 on EX4300; 19.1 versions prior to 19.1R1-S4, 19.1R2 on EX4300; 19.2 versions prior to 19.2R1-S4, 19.2R2 on EX4300; 19.3 versions prior to 19.3R1-S1, 19.3R2 on EX4300.

• CWE-200

• https://kb.juniper.net/JSA11008Vendor Advisory
• https://kb.juniper.net/JSA11008Vendor Advisory

Published

Apr 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16273In Arm software implementing the Armv8-M processors (all ver…7.8
• CVE-2020-16275A cross-site scripting (XSS) vulnerability in the Credential…6.1
• CVE-2020-16276An SQL injection vulnerability in the Assets component of SA…8.8
• CVE-2020-16277An SQL injection vulnerability in the Analytics component of…8.8
• CVE-2020-16278A cross-site scripting (XSS) vulnerability in the Permission…6.1
• CVE-2020-16279The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulne…9.8
• CVE-2020-16280Multiple Rangee GmbH RangeeOS 8.0.4 modules store credential…5.5
• CVE-2020-16281The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could al…7.8
• CVE-2020-16282In the default configuration of Rangee GmbH RangeeOS 8.0.4, …8.8
• CVE-2020-16287A buffer overflow vulnerability in lprn_is_black() in contri…5.5
• CVE-2020-16288A buffer overflow vulnerability in pj_common_print_page() in…5.5
• CVE-2020-16289A buffer overflow vulnerability in cif_print_page() in devic…5.5