CVE-2020-1689

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of specific layer 2 frames can cause high CPU load, which could lead to traffic interruption. This issue does not occur when the device is deployed in Stand Alone configuration. The offending layer 2 frame packets can originate only from within the broadcast domain where the device is connected. This issue affects Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S3, 20.1R2.

• CWE-400

• https://kb.juniper.net/JSA11086Vendor Advisory
• https://kb.juniper.net/JSA11086Vendor Advisory

Published

Oct 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16881<p>A remote code execution vulnerability exists in Visual St…7.8
• CVE-2020-16884<p>A remote code execution vulnerability exists in the way t…4.2
• CVE-2020-16885<p>An elevation of privilege vulnerability exists when the W…7.8
• CVE-2020-16886<p>A security feature bypass vulnerability exists in the Pow…5.3
• CVE-2020-16887<p>An elevation of privilege vulnerability exists in the way…7.8
• CVE-2020-16889<p>An information disclosure vulnerability exists when the W…5.5
• CVE-2020-16890<p>An elevation of privilege vulnerability exists when the W…7.8
• CVE-2020-16891<p>A remote code execution vulnerability exists when Windows…8.8
• CVE-2020-16892<p>An elevation of privilege vulnerability exists in the way…7.8
• CVE-2020-16894<p>A denial of service vulnerability exists when Windows Net…7.7
• CVE-2020-16895<p>An elevation of privilege vulnerability exists when Windo…7.8
• CVE-2020-16896<p>An information disclosure vulnerability exists in Remote …7.5