CVE-2020-1650 (GCVE-0-2020-1650)

Vulnerability from cvelistv5 – Published: 2020-07-17 18:40 – Updated: 2024-09-16 20:22
VLAI
Title
Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC
Summary
On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of Service. This issue affects MX Series devices using MS-PIC, MS-MIC or MS-MPC service cards with any service configured. This issue affects Juniper Networks Junos OS on MX Series: 17.2R2-S7; 17.3R3-S4, 17.3R3-S5; 17.4R2-S4 and the subsequent SRs (17.4R2-S5, 17.4R2-S6, etc.); 17.4R3; 18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8; 18.2R3, 18.2R3-S1, 18.2R3-S2; 18.3R2 and the SRs based on 18.3R2; 18.4R2 and the SRs based on 18.4R2; 19.1R1 and the SRs based on 19.1R1; 19.2R1 and the SRs based on 19.2R1; 19.3R1 and the SRs based on 19.3R1.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
  • TBD
Assigner
juniper CNA under the mitre root
CNA scorecard B 84/100 over 193 records in the last 180 days details
References
URL Tags
https://kb.juniper.net/JSA11037 x_refsource_CONFIRM
Impacted products
Vendor Product Version CPE status
Juniper Networks Junos OS Affected: 17.2R2-S7
Affected: 17.3R3-S4, 17.3R3-S5
Affected: 17.4R3
Affected: 18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8
Affected: 18.2R3, 18.2R3-S1, 18.2R3-S2
Affected: 17.4R2-S4 , < 17.4* (custom)
Affected: 18.3R2 , < 18.3* (custom)
Affected: 18.4R2 , < 18.4* (custom)
Affected: 19.1R1 , < 19.1* (custom)
Affected: 19.2R1 , < 19.2* (custom)
Affected: 19.3R1 , < 19.3* (custom)
guessed Create a notification for this product.
Date Public
2020-07-08 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T06:46:30.320Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA11037"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "MX Series"
          ],
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "status": "affected",
              "version": "17.2R2-S7"
            },
            {
              "status": "affected",
              "version": "17.3R3-S4, 17.3R3-S5"
            },
            {
              "status": "affected",
              "version": "17.4R3"
            },
            {
              "status": "affected",
              "version": "18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8"
            },
            {
              "status": "affected",
              "version": "18.2R3, 18.2R3-S1, 18.2R3-S2"
            },
            {
              "lessThan": "17.4*",
              "status": "affected",
              "version": "17.4R2-S4",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "18.3R3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "18.3*",
              "status": "affected",
              "version": "18.3R2",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "18.4R3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "18.4*",
              "status": "affected",
              "version": "18.4R2",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "19.1R3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "19.1*",
              "status": "affected",
              "version": "19.1R1",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "19.2R2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "19.2*",
              "status": "affected",
              "version": "19.2R1",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "19.3R3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "19.3*",
              "status": "affected",
              "version": "19.3R1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2020-07-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of Service. This issue affects MX Series devices using MS-PIC, MS-MIC or MS-MPC service cards with any service configured. This issue affects Juniper Networks Junos OS on MX Series: 17.2R2-S7; 17.3R3-S4, 17.3R3-S5; 17.4R2-S4 and the subsequent SRs (17.4R2-S5, 17.4R2-S6, etc.); 17.4R3; 18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8; 18.2R3, 18.2R3-S1, 18.2R3-S2; 18.3R2 and the SRs based on 18.3R2; 18.4R2 and the SRs based on 18.4R2; 19.1R1 and the SRs based on 19.1R1; 19.2R1 and the SRs based on 19.2R1; 19.3R1 and the SRs based on 19.3R1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "TBD",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-17T18:40:43.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA11037"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: 17.2R2-S8, 17.3R3-S6, 17.4R3-S1, 18.1R3-S9, 18.2R3-S3, 18.3R3, 18.4R3, 19.1R2, 19.2R2, 19.3R2, 19.4R1, and all subsequent releases."
        }
      ],
      "source": {
        "advisory": "JSA11037",
        "defect": [
          "1453811"
        ],
        "discovery": "USER"
      },
      "title": "Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC",
      "workarounds": [
        {
          "lang": "en",
          "value": "There are no known workarounds for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2020-07-08T07:00:00.000Z",
          "ID": "CVE-2020-1650",
          "STATE": "PUBLIC",
          "TITLE": "Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "MX Series",
                            "version_affected": "=",
                            "version_name": "17.2",
                            "version_value": "17.2R2-S7"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "=",
                            "version_name": "17.3",
                            "version_value": "17.3R3-S4, 17.3R3-S5"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003e=",
                            "version_name": "17.4",
                            "version_value": "17.4R2-S4"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "=",
                            "version_name": "17.4",
                            "version_value": "17.4R3"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "=",
                            "version_name": "18.1",
                            "version_value": "18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "=",
                            "version_name": "18.2",
                            "version_value": "18.2R3, 18.2R3-S1, 18.2R3-S2"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003e=",
                            "version_name": "18.3",
                            "version_value": "18.3R2"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003c",
                            "version_name": "18.3",
                            "version_value": "18.3R3"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003e=",
                            "version_name": "18.4",
                            "version_value": "18.4R2"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003c",
                            "version_name": "18.4",
                            "version_value": "18.4R3"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003e=",
                            "version_name": "19.1",
                            "version_value": "19.1R1"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003c",
                            "version_name": "19.1",
                            "version_value": "19.1R3"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003e=",
                            "version_name": "19.2",
                            "version_value": "19.2R1"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003c",
                            "version_name": "19.2",
                            "version_value": "19.2R2"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003e=",
                            "version_name": "19.3",
                            "version_value": "19.3R1"
                          },
                          {
                            "platform": "MX Series",
                            "version_affected": "\u003c",
                            "version_name": "19.3",
                            "version_value": "19.3R3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of Service. This issue affects MX Series devices using MS-PIC, MS-MIC or MS-MPC service cards with any service configured. This issue affects Juniper Networks Junos OS on MX Series: 17.2R2-S7; 17.3R3-S4, 17.3R3-S5; 17.4R2-S4 and the subsequent SRs (17.4R2-S5, 17.4R2-S6, etc.); 17.4R3; 18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8; 18.2R3, 18.2R3-S1, 18.2R3-S2; 18.3R2 and the SRs based on 18.3R2; 18.4R2 and the SRs based on 18.4R2; 19.1R1 and the SRs based on 19.1R1; 19.2R1 and the SRs based on 19.2R1; 19.3R1 and the SRs based on 19.3R1."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
          }
        ],
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "TBD"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA11037",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA11037"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "The following software releases have been updated to resolve this specific issue: 17.2R2-S8, 17.3R3-S6, 17.4R3-S1, 18.1R3-S9, 18.2R3-S3, 18.3R3, 18.4R3, 19.1R2, 19.2R2, 19.3R2, 19.4R1, and all subsequent releases."
          }
        ],
        "source": {
          "advisory": "JSA11037",
          "defect": [
            "1453811"
          ],
          "discovery": "USER"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "There are no known workarounds for this issue."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2020-1650",
    "datePublished": "2020-07-17T18:40:43.159Z",
    "dateReserved": "2019-11-04T00:00:00.000Z",
    "dateUpdated": "2024-09-16T20:22:04.230Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2020-1650",
      "date": "2026-11-01",
      "epss": "0.01044",
      "percentile": "0.64133"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
                    "matchCriteriaId": "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
                    "matchCriteriaId": "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
                    "matchCriteriaId": "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
                    "matchCriteriaId": "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
                    "matchCriteriaId": "5E327643-D8D8-4EFA-9F38-BA862A919501",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
                    "matchCriteriaId": "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
                    "matchCriteriaId": "63B00B4F-3E65-4CB2-807D-43908B570AE6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "8732E25A-9073-4C7B-9E89-C02368728EB4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "B0A756E2-C320-405A-B24F-7C5022649E5A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
                    "matchCriteriaId": "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
                    "matchCriteriaId": "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
                    "matchCriteriaId": "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
                    "matchCriteriaId": "7988CE92-71D2-4EEC-B596-4A60E2C1136A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
                    "matchCriteriaId": "330D176F-8DAD-440C-A623-44FA233FAB01",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
                    "matchCriteriaId": "8CC5EAB8-1364-4325-9F01-BE7CC479C29D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "167EEC4F-729E-47C2-B0F8-E8108CE3E985",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
                    "matchCriteriaId": "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
                    "matchCriteriaId": "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "5F711936-33A1-47FC-A6A0-A63088915815",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
                    "matchCriteriaId": "B670F988-78F2-4BC6-B7FC-E34C280F67DC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
                    "matchCriteriaId": "2F9451C7-6466-4AC9-9A7F-90A2817AED6C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
                    "matchCriteriaId": "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
                    "matchCriteriaId": "4EBD361C-8B4D-43EF-8B82-9FE165D8206E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
                    "matchCriteriaId": "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
                    "matchCriteriaId": "35299B02-DC75-458D-B86D-8A0DB95B06AA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
                    "matchCriteriaId": "D59D7A31-128B-4034-862B-8EF3CE3EE949",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
                    "matchCriteriaId": "0C5E097B-B79E-4E6A-9291-C8CB9674FED5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
                    "matchCriteriaId": "819FA3ED-F934-4B20-BC0E-D638ACCB7787",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
                    "matchCriteriaId": "3D7D773A-4988-4D7C-A105-1885EBE14426",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "5332B70A-F6B0-4C3B-90E2-5CBFB3326126",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
                    "matchCriteriaId": "81439FE8-5405-45C2-BC04-9823D2009A77",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
                    "matchCriteriaId": "E506138D-043E-485D-B485-94A2AB75F8E7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
                    "matchCriteriaId": "0EF3C901-3599-463F-BEFB-8858768DC195",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "4CA3060F-1800-4A06-A453-FB8CE4B65312",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
                    "matchCriteriaId": "9A5B337A-727C-4767-AD7B-E0F7F99EB46F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
                    "matchCriteriaId": "16FDE60B-7A99-4683-BC14-530B5B005F8B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
                    "matchCriteriaId": "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
                    "matchCriteriaId": "11B5CC5A-1959-4113-BFCF-E4BA63D918C1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "52699E2B-450A-431C-81E3-DC4483C8B4F2",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F72C850A-0530-4DB7-A553-7E19F82122B5",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7FE2089C-F341-4DC1-B76D-633BC699306D",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "27175D9A-CA2C-4218-8042-835E25DFCA43",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "00C7FC57-8ACF-45AA-A227-7E3B350FD24F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2754C2DF-DF6E-4109-9463-38B4E0465B77",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F4A26704-A6A4-4C4F-9E12-A0A0259491EF",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "104858BD-D31D-40E0-8524-2EC311F10EAC",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3B557965-0040-4048-B56C-F564FF28635B",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EB875EBD-A3CD-4466-B2A3-39D47FF94592",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B5E08E1E-0FE4-4294-9497-BBFFECA2A220",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of Service. This issue affects MX Series devices using MS-PIC, MS-MIC or MS-MPC service cards with any service configured. This issue affects Juniper Networks Junos OS on MX Series: 17.2R2-S7; 17.3R3-S4, 17.3R3-S5; 17.4R2-S4 and the subsequent SRs (17.4R2-S5, 17.4R2-S6, etc.); 17.4R3; 18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8; 18.2R3, 18.2R3-S1, 18.2R3-S2; 18.3R2 and the SRs based on 18.3R2; 18.4R2 and the SRs based on 18.4R2; 19.1R1 and the SRs based on 19.1R1; 19.2R1 and the SRs based on 19.2R1; 19.3R1 and the SRs based on 19.3R1."
          },
          {
            "lang": "es",
            "value": "En Juniper Networks Junos MX Series con la tarjeta de servicio configurada, la recepci\u00f3n de un flujo de paquetes espec\u00edficos puede bloquear el componente MS-PIC en MS-MIC o MS-MPC. Al enviar continuamente estos paquetes espec\u00edficos, un atacante puede derribar de forma repetida MS-PIC en MS-MIC/MS-MPC causando una Denegaci\u00f3n de Servicio prolongada. Este problema afecta a los dispositivos de la Serie MX que utilizan tarjetas de servicio MS-PIC, MS-MIC o MS-MPC con cualquier servicio configurado. Este problema afecta a Juniper Networks Junos OS en la Serie MX: 17.2R2-S7; 17.3R3-S4, 17.3R3-S5; 17.4R2-S4 y los SR posteriores (17.4R2-S5, 17.4R2-S6, etc.); 17.4R3; 18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8; 18.2R3, 18.2R3-S1, 18.2R3-S2; 18.3R2 y los SR basados ??en 18.3R2; 18.4R2 y los SR basados ??en 18.4R2; 19.1R1 y los SR basados ??en 19.1R1; 19.2R1 y los SR basados ??en 19.2R1; 19.3R1 y los SR basados ??en 19.3R1"
          }
        ],
        "id": "CVE-2020-1650",
        "lastModified": "2024-11-21T05:11:05.067",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "sirt@juniper.net",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2020-07-17T19:15:13.470",
        "references": [
          {
            "source": "sirt@juniper.net",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.juniper.net/JSA11037"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://kb.juniper.net/JSA11037"
          }
        ],
        "sourceIdentifier": "sirt@juniper.net",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.