Vulnerability-Lookup

BDU:2020-04878 (CVE-2020-1682)

Vulnerability from fstec – Published: 2020-10-27 – Updated: 2021-06-18 – View on bdu.fstec.ru Fixed

Title

Уязвимость процесса srxpfe операционной системы Junos маршрутизаторов серии NFX150, NFX250, SRX1500, SRX4100, SRX4200 и vSRX, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость процесса srxpfe операционной системы Junos маршрутизаторов серии NFX150, NFX250, SRX1500, SRX4100, SRX4200 и vSRX связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:N/I:N/A:C

5.5 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource exhaustion

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2020-1682

References

2 references

URL
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11079&cat=SIRT_1&actp=LIST
https://nvd.nist.gov/vuln/detail/CVE-2020-1682

Impacted products

1 product from 1 vendor

Vendors

Juniper Networks Inc.

Products

JunOS

Versions

до 15.1X49-D220 (JunOS), до 17.4R3-S3 (JunOS), до 18.1R3-S11 (JunOS), до 18.2R3-S5 (JunOS), до 18.3R2-S4 (JunOS), до 18.3R3-S3 (JunOS), до 18.4R2-S5 (JunOS), до 18.4R3-S4 (JunOS), до 19.1R3-S2 (JunOS), до 19.2R1-S5 (JunOS), до 19.2R3 (JunOS)

Product types

Operating system

Platforms

Juniper Networks Inc. JunOS до 15.1X49-D220 SRX1500, Juniper Networks Inc. JunOS до 15.1X49-D220 SRX4100, Juniper Networks Inc. JunOS до 15.1X49-D220 SRX4200, Juniper Networks Inc. JunOS до 15.1X49-D220 vSRX Series, Juniper Networks Inc. JunOS до 17.4R3-S3 SRX1500, Juniper Networks Inc. JunOS до 17.4R3-S3 SRX4100, Juniper Networks Inc. JunOS до 17.4R3-S3 SRX4200, Juniper Networks Inc. JunOS до 17.4R3-S3 vSRX Series, Juniper Networks Inc. JunOS до 18.1R3-S11 SRX1500, Juniper Networks Inc. JunOS до 18.1R3-S11 SRX4100, Juniper Networks Inc. JunOS до 18.1R3-S11 SRX4200, Juniper Networks Inc. JunOS до 18.1R3-S11 vSRX Series, Juniper Networks Inc. JunOS до 18.1R3-S11 NFX150, Juniper Networks Inc. JunOS до 18.2R3-S5 SRX1500, Juniper Networks Inc. JunOS до 18.2R3-S5 SRX4100, Juniper Networks Inc. JunOS до 18.2R3-S5 SRX4200, Juniper Networks Inc. JunOS до 18.2R3-S5 vSRX Series, Juniper Networks Inc. JunOS до 18.2R3-S5 NFX150, Juniper Networks Inc. JunOS до 18.2R3-S5 NFX250, Juniper Networks Inc. JunOS до 18.3R2-S4 SRX1500, Juniper Networks Inc. JunOS до 18.3R2-S4 SRX4100, Juniper Networks Inc. JunOS до 18.3R2-S4 SRX4200, Juniper Networks Inc. JunOS до 18.3R2-S4 vSRX Series, Juniper Networks Inc. JunOS до 18.3R2-S4 NFX150, Juniper Networks Inc. JunOS до 18.3R3-S3 SRX1500, Juniper Networks Inc. JunOS до 18.3R2-S4 NFX250, Juniper Networks Inc. JunOS до 18.3R3-S3 SRX4100, Juniper Networks Inc. JunOS до 18.3R3-S3 SRX4200, Juniper Networks Inc. JunOS до 18.3R3-S3 vSRX Series, Juniper Networks Inc. JunOS до 18.3R3-S3 NFX150, Juniper Networks Inc. JunOS до 18.3R3-S3 NFX250, Juniper Networks Inc. JunOS до 18.4R2-S5 SRX1500, Juniper Networks Inc. JunOS до 18.4R2-S5 SRX4100, Juniper Networks Inc. JunOS до 18.4R2-S5 SRX4200, Juniper Networks Inc. JunOS до 18.4R2-S5 vSRX Series, Juniper Networks Inc. JunOS до 18.4R2-S5 NFX150, Juniper Networks Inc. JunOS до 18.4R2-S5 NFX250, Juniper Networks Inc. JunOS до 18.4R3-S4 SRX1500, Juniper Networks Inc. JunOS до 18.4R3-S4 SRX4100, Juniper Networks Inc. JunOS до 18.4R3-S4 SRX4200, Juniper Networks Inc. JunOS до 18.4R3-S4 vSRX Series, Juniper Networks Inc. JunOS до 18.4R3-S4 NFX150, Juniper Networks Inc. JunOS до 18.4R3-S4 NFX250, Juniper Networks Inc. JunOS до 19.1R3-S2 SRX1500, Juniper Networks Inc. JunOS до 19.1R3-S2 SRX4100, Juniper Networks Inc. JunOS до 19.1R3-S2 SRX4200, Juniper Networks Inc. JunOS до 19.1R3-S2 vSRX Series, Juniper Networks Inc. JunOS до 19.1R3-S2 NFX150, Juniper Networks Inc. JunOS до 19.1R3-S2 NFX250, Juniper Networks Inc. JunOS до 19.2R1-S5 SRX1500, Juniper Networks Inc. JunOS до 19.2R1-S5 SRX4100, Juniper Networks Inc. JunOS до 19.2R1-S5 SRX4200, Juniper Networks Inc. JunOS до 19.2R1-S5 vSRX Series, Juniper Networks Inc. JunOS до 19.2R1-S5 NFX150, Juniper Networks Inc. JunOS до 19.2R1-S5 NFX250, Juniper Networks Inc. JunOS до 19.2R3 SRX1500, Juniper Networks Inc. JunOS до 19.2R3 SRX4100, Juniper Networks Inc. JunOS до 19.2R3 SRX4200, Juniper Networks Inc. JunOS до 19.2R3 vSRX Series, Juniper Networks Inc. JunOS до 19.2R3 NFX150, Juniper Networks Inc. JunOS до 19.2R3 NFX250

Mitigations

Использвание рекомендаций: https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11079&actp=METADATA

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Juniper Networks Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 15.1X49-D220 (JunOS), \u0434\u043e 17.4R3-S3 (JunOS), \u0434\u043e 18.1R3-S11 (JunOS), \u0434\u043e 18.2R3-S5 (JunOS), \u0434\u043e 18.3R2-S4 (JunOS), \u0434\u043e 18.3R3-S3 (JunOS), \u0434\u043e 18.4R2-S5 (JunOS), \u0434\u043e 18.4R3-S4 (JunOS), \u0434\u043e 19.1R3-S2 (JunOS), \u0434\u043e 19.2R1-S5 (JunOS), \u0434\u043e 19.2R3 (JunOS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11079\u0026actp=METADATA",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "21.10.2020",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "18.06.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "27.10.2020",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2020-04878",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2020-1682",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "JunOS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Juniper Networks Inc. JunOS \u0434\u043e 15.1X49-D220 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 15.1X49-D220 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 15.1X49-D220 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 15.1X49-D220 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 17.4R3-S3 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 17.4R3-S3 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 17.4R3-S3 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 17.4R3-S3 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 18.1R3-S11 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 18.1R3-S11 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 18.1R3-S11 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 18.1R3-S11 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 18.1R3-S11 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 18.2R3-S5 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 18.2R3-S5 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 18.2R3-S5 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 18.2R3-S5 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 18.2R3-S5 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 18.2R3-S5 NFX250, Juniper Networks Inc. JunOS \u0434\u043e 18.3R2-S4 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 18.3R2-S4 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 18.3R2-S4 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 18.3R2-S4 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 18.3R2-S4 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 18.3R3-S3 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 18.3R2-S4 NFX250, Juniper Networks Inc. JunOS \u0434\u043e 18.3R3-S3 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 18.3R3-S3 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 18.3R3-S3 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 18.3R3-S3 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 18.3R3-S3 NFX250, Juniper Networks Inc. JunOS \u0434\u043e 18.4R2-S5 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 18.4R2-S5 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 18.4R2-S5 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 18.4R2-S5 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 18.4R2-S5 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 18.4R2-S5 NFX250, Juniper Networks Inc. JunOS \u0434\u043e 18.4R3-S4 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 18.4R3-S4 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 18.4R3-S4 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 18.4R3-S4 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 18.4R3-S4 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 18.4R3-S4 NFX250, Juniper Networks Inc. JunOS \u0434\u043e 19.1R3-S2 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 19.1R3-S2 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 19.1R3-S2 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 19.1R3-S2 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 19.1R3-S2 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 19.1R3-S2 NFX250, Juniper Networks Inc. JunOS \u0434\u043e 19.2R1-S5 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 19.2R1-S5 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 19.2R1-S5 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 19.2R1-S5 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 19.2R1-S5 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 19.2R1-S5 NFX250, Juniper Networks Inc. JunOS \u0434\u043e 19.2R3 SRX1500, Juniper Networks Inc. JunOS \u0434\u043e 19.2R3 SRX4100, Juniper Networks Inc. JunOS \u0434\u043e 19.2R3 SRX4200, Juniper Networks Inc. JunOS \u0434\u043e 19.2R3 vSRX Series, Juniper Networks Inc. JunOS \u0434\u043e 19.2R3 NFX150, Juniper Networks Inc. JunOS \u0434\u043e 19.2R3 NFX250",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 srxpfe \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Junos \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 NFX150, NFX250, SRX1500, SRX4100, SRX4200 \u0438 vSRX, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 srxpfe \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Junos \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 NFX150, NFX250, SRX1500, SRX4100, SRX4200 \u0438 vSRX \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11079\u0026cat=SIRT_1\u0026actp=LIST\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-1682",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}

CVE-2020-1682 (GCVE-0-2020-1682)

Vulnerability from cvelistv5 – Published: 2020-10-16 20:31 – Updated: 2024-09-17 00:35

Title

Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command

Summary

An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service (DoS) through the use of specific maintenance commands. The srxpfe process restarts automatically, but continuous execution of the commands could lead to an extended Denial of Service condition. This issue only affects the SRX1500, SRX4100, SRX4200, NFX150, NFX250, and vSRX-based platforms. No other products or platforms are affected by this vulnerability. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D220 on SRX1500, SRX4100, SRX4200, vSRX; 17.4 versions prior to 17.4R3-S3 on SRX1500, SRX4100, SRX4200, vSRX; 18.1 versions prior to 18.1R3-S11 on SRX1500, SRX4100, SRX4200, vSRX, NFX150; 18.2 versions prior to 18.2R3-S5 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 19.1 versions prior to 19.1R3-S2 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 19.2 versions prior to 19.2R1-S5, 19.2R3 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250. This issue does not affect Junos OS 19.3 or any subsequent version.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-20 - Improper Input Validation

Assigner

juniper mitre root

References

1 reference

URL	Tags
https://kb.juniper.net/JSA11079	x_refsource_CONFIRM

Impacted products

3 products

Vendor	Product	Version
Juniper Networks	Junos OS	Affected: 15.1X49 , < 15.1X49-D220 (custom) Affected: 17.4 , < 17.4R3-S3 (custom)
Juniper Networks	Junos OS	Affected: 18.1 , < 18.1R3-S11 (custom)
Juniper Networks	Junos OS	Affected: 18.2 , < 18.2R3-S5 (custom) Affected: 18.3 , < 18.3R2-S4, 18.3R3-S3 (custom) Affected: 18.4 , < 18.4R2-S5, 18.4R3-S4 (custom) Affected: 19.1 , < 19.1R3-S2 (custom) Affected: 19.2 , < 19.2R1-S5, 19.2R3 (custom)

Date Public

2020-10-14 00:00

Credits

Juniper SIRT would like to acknowledge and thank The UK's National Cyber Security Centre (NCSC) for responsibly reporting this vulnerability.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T06:46:29.971Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA11079"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "SRX1500, SRX4100, SRX4200, vSRX"
          ],
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "15.1X49-D220",
              "status": "affected",
              "version": "15.1X49",
              "versionType": "custom"
            },
            {
              "lessThan": "17.4R3-S3",
              "status": "affected",
              "version": "17.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "SRX1500, SRX4100, SRX4200, vSRX, NFX150"
          ],
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "18.1R3-S11",
              "status": "affected",
              "version": "18.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250"
          ],
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "18.2R3-S5",
              "status": "affected",
              "version": "18.2",
              "versionType": "custom"
            },
            {
              "lessThan": "18.3R2-S4, 18.3R3-S3",
              "status": "affected",
              "version": "18.3",
              "versionType": "custom"
            },
            {
              "lessThan": "18.4R2-S5, 18.4R3-S4",
              "status": "affected",
              "version": "18.4",
              "versionType": "custom"
            },
            {
              "lessThan": "19.1R3-S2",
              "status": "affected",
              "version": "19.1",
              "versionType": "custom"
            },
            {
              "lessThan": "19.2R1-S5, 19.2R3",
              "status": "affected",
              "version": "19.2",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Juniper SIRT would like to acknowledge and thank The UK\u0027s National Cyber Security Centre (NCSC) for responsibly reporting this vulnerability."
        }
      ],
      "datePublic": "2020-10-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service (DoS) through the use of specific maintenance commands. The srxpfe process restarts automatically, but continuous execution of the commands could lead to an extended Denial of Service condition. This issue only affects the SRX1500, SRX4100, SRX4200, NFX150, NFX250, and vSRX-based platforms. No other products or platforms are affected by this vulnerability. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D220 on SRX1500, SRX4100, SRX4200, vSRX; 17.4 versions prior to 17.4R3-S3 on SRX1500, SRX4100, SRX4200, vSRX; 18.1 versions prior to 18.1R3-S11 on SRX1500, SRX4100, SRX4200, vSRX, NFX150; 18.2 versions prior to 18.2R3-S5 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 19.1 versions prior to 19.1R3-S2 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 19.2 versions prior to 19.2R1-S5, 19.2R3 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250. This issue does not affect Junos OS 19.3 or any subsequent version."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-22T21:34:35.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA11079"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: Junos OS 15.1X49-D220, 17.4R3-S3, 18.1R3-S11, 18.2R3-S5, 18.3R2-S4, 18.3R3-S3, 18.4R2-S5, 18.4R3-S4, 19.1R3-S2, 19.2R1-S5, and 19.2R3.\n\nNote: This fix has also been proactively committed into other releases that might not be vulnerable to this issue."
        }
      ],
      "source": {
        "advisory": "JSA11079",
        "defect": [
          "1486905"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command",
      "workarounds": [
        {
          "lang": "en",
          "value": "Use access lists or firewall filters to limit access to the device only from trusted hosts and trusted administrators."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2020-10-14T16:00:00.000Z",
          "ID": "CVE-2020-1682",
          "STATE": "PUBLIC",
          "TITLE": "Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "SRX1500, SRX4100, SRX4200, vSRX",
                            "version_affected": "\u003c",
                            "version_name": "15.1X49",
                            "version_value": "15.1X49-D220"
                          },
                          {
                            "platform": "SRX1500, SRX4100, SRX4200, vSRX",
                            "version_affected": "\u003c",
                            "version_name": "17.4",
                            "version_value": "17.4R3-S3"
                          },
                          {
                            "platform": "SRX1500, SRX4100, SRX4200, vSRX, NFX150",
                            "version_affected": "\u003c",
                            "version_name": "18.1",
                            "version_value": "18.1R3-S11"
                          },
                          {
                            "platform": "SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250",
                            "version_affected": "\u003c",
                            "version_name": "18.2",
                            "version_value": "18.2R3-S5"
                          },
                          {
                            "platform": "SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250",
                            "version_affected": "\u003c",
                            "version_name": "18.3",
                            "version_value": "18.3R2-S4, 18.3R3-S3"
                          },
                          {
                            "platform": "SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250",
                            "version_affected": "\u003c",
                            "version_name": "18.4",
                            "version_value": "18.4R2-S5, 18.4R3-S4"
                          },
                          {
                            "platform": "SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250",
                            "version_affected": "\u003c",
                            "version_name": "19.1",
                            "version_value": "19.1R3-S2"
                          },
                          {
                            "platform": "SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250",
                            "version_affected": "\u003c",
                            "version_name": "19.2",
                            "version_value": "19.2R1-S5, 19.2R3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Juniper SIRT would like to acknowledge and thank The UK\u0027s National Cyber Security Centre (NCSC) for responsibly reporting this vulnerability."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service (DoS) through the use of specific maintenance commands. The srxpfe process restarts automatically, but continuous execution of the commands could lead to an extended Denial of Service condition. This issue only affects the SRX1500, SRX4100, SRX4200, NFX150, NFX250, and vSRX-based platforms. No other products or platforms are affected by this vulnerability. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D220 on SRX1500, SRX4100, SRX4200, vSRX; 17.4 versions prior to 17.4R3-S3 on SRX1500, SRX4100, SRX4200, vSRX; 18.1 versions prior to 18.1R3-S11 on SRX1500, SRX4100, SRX4200, vSRX, NFX150; 18.2 versions prior to 18.2R3-S5 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 19.1 versions prior to 19.1R3-S2 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250; 19.2 versions prior to 19.2R1-S5, 19.2R3 on SRX1500, SRX4100, SRX4200, vSRX, NFX150, NFX250. This issue does not affect Junos OS 19.3 or any subsequent version."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
          }
        ],
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA11079",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA11079"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "The following software releases have been updated to resolve this specific issue: Junos OS 15.1X49-D220, 17.4R3-S3, 18.1R3-S11, 18.2R3-S5, 18.3R2-S4, 18.3R3-S3, 18.4R2-S5, 18.4R3-S4, 19.1R3-S2, 19.2R1-S5, and 19.2R3.\n\nNote: This fix has also been proactively committed into other releases that might not be vulnerable to this issue."
          }
        ],
        "source": {
          "advisory": "JSA11079",
          "defect": [
            "1486905"
          ],
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Use access lists or firewall filters to limit access to the device only from trusted hosts and trusted administrators."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2020-1682",
    "datePublished": "2020-10-16T20:31:35.441Z",
    "dateReserved": "2019-11-04T00:00:00.000Z",
    "dateUpdated": "2024-09-17T00:35:27.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2020-04878 (CVE-2020-1682)

CVE-2020-1682 (GCVE-0-2020-1682)

Tags

Sightings

Nomenclature

Related by attack behaviour