CVE-2020-1648
Last modified
CVE-2020-1648 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart. This issue can occur even before the BGP session with the peer is established. EPSS estimates a 1.28% chance of exploitation in the next 30 days.
Description
On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an extended Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 18.2X75 versions starting from 18.2X75-D50.8, 18.2X75-D60 and later versions, prior to 18.2X75-D52.8, 18.2X75-D53, 18.2X75-D60.2, 18.2X75-D65.1, 18.2X75-D70; 19.4 versions 19.4R1 and 19.4R1-S1; 20.1 versions prior to 20.1R1-S2, 20.1R2. Juniper Networks Junos OS Evolved: 19.4-EVO versions prior to 19.4R2-S2-EVO; 20.1-EVO versions prior to 20.1R2-EVO. This issue does not affect: Juniper Networks Junos OS releases prior to 19.4R1. Juniper Networks Junos OS Evolved releases prior to 19.4R1-EVO.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Junos | 18.2x75 | — |
| Juniper | Junos | 19.4 | R1 |
| Juniper | Junos | 20.1 | R1 |
| Juniper | Junos Os Evolved | 19.4 | R1 |
| Juniper | Junos Os Evolved | 20.1 | R1 |
References
- https://kb.juniper.net/JSA11035Vendor Advisory
- https://kb.juniper.net/JSA11035Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-1648?
How severe is CVE-2020-1648?
How do I fix CVE-2020-1648?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-1641A Race Condition vulnerability in Juniper Networks Junos OS …6.5
- CVE-2020-1643Execution of the "show ospf interface extensive" or "show os…5.5
- CVE-2020-1644On Juniper Networks Junos OS and Junos OS Evolved devices, t…7.5
- CVE-2020-1645When DNS filtering is enabled on Juniper Networks Junos MX S…8.3
- CVE-2020-1646On Juniper Networks Junos OS and Junos OS Evolved devices, p…7.5
- CVE-2020-1647On Juniper Networks SRX Series with ICAP (Internet Content A…9.8
- CVE-2020-1649When a device running Juniper Networks Junos OS with MPC7, M…7.5
- CVE-2020-1650On Juniper Networks Junos MX Series with service card config…7.5
- CVE-2020-1651On Juniper Networks MX series, receipt of a stream of specif…6.5
- CVE-2020-1652OpenNMS is accessible via port 94439.8
- CVE-2020-16526Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-1653On Juniper Networks Junos OS devices, a stream of TCP packet…7.5
Are you affected by CVE-2020-1648?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
