Lucene search
JuniperCVE-2020-1680HistoryOct 16, 2020 - 9:15 p.m.
CVE-2020-1680
2020-10-1621:15:13
CWE-131
juniper
web.nvd.nist.gov
27
juniper networks
mx series
nat64
cve-2020-1680
denial of service
junos os
vulnerability
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
41.2%
On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticated attacker can continuously send crafted IPv6 packets through the device causing repetitive MS-PIC process crashes, resulting in an extended Denial of Service condition. This issue affects Juniper Networks Junos OS on MX Series: 15.1 versions prior to 15.1R7-S7; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R2-S11, 17.4R3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D41, 18.2X75-D430, 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3; 18.4 versions prior to 18.4R2-S5, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2.
Affected configurations
Node
junipermx10Match-
ORjunipermx10000Match-
ORjunipermx10003Match-
ORjunipermx104Match-
ORjunipermx150Match-
ORjunipermx2008Match-
ORjunipermx2010Match-
ORjunipermx2020Match-
ORjunipermx204Match-
ORjunipermx240Match-
ORjunipermx40Match-
ORjunipermx480Match-
ORjunipermx5Match-
ORjunipermx80Match-
ORjunipermx960Match-
juniperjunosMatch15.1-
ORjuniperjunosMatch15.1a1
ORjuniperjunosMatch15.1f
ORjuniperjunosMatch15.1f1
ORjuniperjunosMatch15.1f2
ORjuniperjunosMatch15.1f2-s1
ORjuniperjunosMatch15.1f2-s2
ORjuniperjunosMatch15.1f2-s3
ORjuniperjunosMatch15.1f2-s4
ORjuniperjunosMatch15.1f3
ORjuniperjunosMatch15.1f4
ORjuniperjunosMatch15.1f5
ORjuniperjunosMatch15.1f5-s7
ORjuniperjunosMatch15.1f6
ORjuniperjunosMatch15.1f6-s1
ORjuniperjunosMatch15.1f6-s12
ORjuniperjunosMatch15.1f6-s2
ORjuniperjunosMatch15.1f6-s3
ORjuniperjunosMatch15.1f6-s4
ORjuniperjunosMatch15.1f6-s7
ORjuniperjunosMatch15.1f7
ORjuniperjunosMatch15.1r1
ORjuniperjunosMatch15.1r2
ORjuniperjunosMatch15.1r3
ORjuniperjunosMatch15.1r4
ORjuniperjunosMatch15.1r4-s7
ORjuniperjunosMatch15.1r4-s8
ORjuniperjunosMatch15.1r4-s9
ORjuniperjunosMatch15.1r5
ORjuniperjunosMatch15.1r5-s1
ORjuniperjunosMatch15.1r5-s5
ORjuniperjunosMatch15.1r5-s6
ORjuniperjunosMatch15.1r6
ORjuniperjunosMatch15.1r6-s1
ORjuniperjunosMatch15.1r6-s2
ORjuniperjunosMatch15.1r6-s6
ORjuniperjunosMatch15.1r7
ORjuniperjunosMatch15.1r7-s1
ORjuniperjunosMatch15.1r7-s2
ORjuniperjunosMatch15.1r7-s3
ORjuniperjunosMatch15.1r7-s4
ORjuniperjunosMatch15.1r7-s5
ORjuniperjunosMatch15.1r7-s6
ORjuniperjunosMatch15.1x53-
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d230
ORjuniperjunosMatch15.1x53d231
ORjuniperjunosMatch15.1x53d232
ORjuniperjunosMatch15.1x53d233
ORjuniperjunosMatch15.1x53d234
ORjuniperjunosMatch15.1x53d235
ORjuniperjunosMatch15.1x53d236
ORjuniperjunosMatch15.1x53d237
ORjuniperjunosMatch15.1x53d25
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d31
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d47
ORjuniperjunosMatch15.1x53d470
ORjuniperjunosMatch15.1x53d48
ORjuniperjunosMatch15.1x53d495
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d590
ORjuniperjunosMatch15.1x53d591
ORjuniperjunosMatch15.1x53d592
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
ORjuniperjunosMatch15.1x53d67
ORjuniperjunosMatch15.1x53d68
ORjuniperjunosMatch15.1x53d69
ORjuniperjunosMatch15.1x53d70
ORjuniperjunosMatch16.1-
ORjuniperjunosMatch16.1r1
ORjuniperjunosMatch16.1r2
ORjuniperjunosMatch16.1r3
ORjuniperjunosMatch16.1r3-s10
ORjuniperjunosMatch16.1r3-s11
ORjuniperjunosMatch16.1r4
ORjuniperjunosMatch16.1r4-s12
ORjuniperjunosMatch16.1r4-s2
ORjuniperjunosMatch16.1r4-s3
ORjuniperjunosMatch16.1r4-s4
ORjuniperjunosMatch16.1r4-s6
ORjuniperjunosMatch16.1r5
ORjuniperjunosMatch16.1r5-s4
ORjuniperjunosMatch16.1r6-s1
ORjuniperjunosMatch16.1r6-s6
ORjuniperjunosMatch16.1r7
ORjuniperjunosMatch16.1r7-s2
ORjuniperjunosMatch16.1r7-s3
ORjuniperjunosMatch16.1r7-s4
ORjuniperjunosMatch16.1r7-s5
ORjuniperjunosMatch16.1r7-s6
ORjuniperjunosMatch16.1r7-s7
ORjuniperjunosMatch17.2-
ORjuniperjunosMatch17.2r1
ORjuniperjunosMatch17.2r1-s1
ORjuniperjunosMatch17.2r1-s2
ORjuniperjunosMatch17.2r1-s3
ORjuniperjunosMatch17.2r1-s4
ORjuniperjunosMatch17.2r1-s5
ORjuniperjunosMatch17.2r1-s7
ORjuniperjunosMatch17.2r1-s8
ORjuniperjunosMatch17.2r2
ORjuniperjunosMatch17.2r2-s11
ORjuniperjunosMatch17.2r2-s6
ORjuniperjunosMatch17.2r2-s7
ORjuniperjunosMatch17.2r3-s1
ORjuniperjunosMatch17.2r3-s2
ORjuniperjunosMatch17.2r3-s3
ORjuniperjunosMatch17.3r3-s5
ORjuniperjunosMatch17.4-
ORjuniperjunosMatch17.4r1
ORjuniperjunosMatch17.4r1-s1
ORjuniperjunosMatch17.4r1-s2
ORjuniperjunosMatch17.4r1-s4
ORjuniperjunosMatch17.4r1-s5
ORjuniperjunosMatch17.4r1-s6
ORjuniperjunosMatch17.4r1-s7
ORjuniperjunosMatch17.4r2
ORjuniperjunosMatch17.4r2-s1
ORjuniperjunosMatch17.4r2-s10
ORjuniperjunosMatch17.4r2-s2
ORjuniperjunosMatch17.4r2-s3
ORjuniperjunosMatch17.4r2-s4
ORjuniperjunosMatch17.4r2-s5
ORjuniperjunosMatch17.4r2-s6
ORjuniperjunosMatch17.4r2-s7
ORjuniperjunosMatch17.4r2-s8
ORjuniperjunosMatch17.4r2-s9
ORjuniperjunosMatch18.1-
ORjuniperjunosMatch18.1r1
ORjuniperjunosMatch18.1r2
ORjuniperjunosMatch18.1r2-s1
ORjuniperjunosMatch18.1r2-s2
ORjuniperjunosMatch18.1r2-s4
ORjuniperjunosMatch18.1r3
ORjuniperjunosMatch18.1r3-s1
ORjuniperjunosMatch18.1r3-s10
ORjuniperjunosMatch18.1r3-s2
ORjuniperjunosMatch18.1r3-s3
ORjuniperjunosMatch18.1r3-s4
ORjuniperjunosMatch18.1r3-s6
ORjuniperjunosMatch18.1r3-s7
ORjuniperjunosMatch18.1r3-s8
ORjuniperjunosMatch18.1r3-s9
ORjuniperjunosMatch18.2-
ORjuniperjunosMatch18.2r1
ORjuniperjunosMatch18.2r1-
ORjuniperjunosMatch18.2r1-s3
ORjuniperjunosMatch18.2r1-s4
ORjuniperjunosMatch18.2r1-s5
ORjuniperjunosMatch18.2r2
ORjuniperjunosMatch18.2r2-s1
ORjuniperjunosMatch18.2r2-s2
ORjuniperjunosMatch18.2r2-s3
ORjuniperjunosMatch18.2r2-s4
ORjuniperjunosMatch18.2r2-s5
ORjuniperjunosMatch18.2r2-s6
ORjuniperjunosMatch18.2r3
ORjuniperjunosMatch18.2r3-s1
ORjuniperjunosMatch18.2r3-s2
ORjuniperjunosMatch18.2r3-s3
ORjuniperjunosMatch18.2r3-s4
ORjuniperjunosMatch18.2r3-s5
ORjuniperjunosMatch18.2x75-
ORjuniperjunosMatch18.2x75d12
ORjuniperjunosMatch18.2x75d20
ORjuniperjunosMatch18.2x75d30
ORjuniperjunosMatch18.2x75d40
ORjuniperjunosMatch18.2x75d411
ORjuniperjunosMatch18.2x75d51
ORjuniperjunosMatch18.3-
ORjuniperjunosMatch18.3r1
ORjuniperjunosMatch18.3r1-s1
ORjuniperjunosMatch18.3r1-s2
ORjuniperjunosMatch18.3r1-s3
ORjuniperjunosMatch18.3r1-s5
ORjuniperjunosMatch18.3r1-s6
ORjuniperjunosMatch18.3r2
ORjuniperjunosMatch18.3r2-s1
ORjuniperjunosMatch18.3r2-s2
ORjuniperjunosMatch18.3r2-s3
ORjuniperjunosMatch18.4-
ORjuniperjunosMatch18.4r1
ORjuniperjunosMatch18.4r1-s1
ORjuniperjunosMatch18.4r1-s2
ORjuniperjunosMatch18.4r1-s5
ORjuniperjunosMatch18.4r1-s6
ORjuniperjunosMatch18.4r2
ORjuniperjunosMatch18.4r2-s1
ORjuniperjunosMatch18.4r2-s2
ORjuniperjunosMatch18.4r2-s3
ORjuniperjunosMatch18.4r2-s4
ORjuniperjunosMatch19.1-
ORjuniperjunosMatch19.1r1
ORjuniperjunosMatch19.1r1-s1
ORjuniperjunosMatch19.1r1-s2
ORjuniperjunosMatch19.1r1-s3
ORjuniperjunosMatch19.1r1-s4
ORjuniperjunosMatch19.2-
ORjuniperjunosMatch19.2r1
ORjuniperjunosMatch19.2r1-s1
ORjuniperjunosMatch19.2r1-s2
ORjuniperjunosMatch19.2r1-s3
ORjuniperjunosMatch19.2r1-s4
ORjuniperjunosMatch19.3-
ORjuniperjunosMatch19.3r1
ORjuniperjunosMatch19.3r1-s1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| juniper | mx10 | - | cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:* |
| juniper | mx10000 | - | cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:* |
| juniper | mx10003 | - | cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:* |
| juniper | mx104 | - | cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:* |
| juniper | mx150 | - | cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:* |
| juniper | mx2008 | - | cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:* |
| juniper | mx2010 | - | cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:* |
| juniper | mx2020 | - | cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:* |
| juniper | mx204 | - | cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:* |
| juniper | mx240 | - | cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"platforms": [
"MX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "15.1R7-S7",
"status": "affected",
"version": "15.1",
"versionType": "custom"
},
{
"lessThan": "15.1X53-D593",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
},
{
"lessThan": "16.1R7-S8",
"status": "affected",
"version": "16.1",
"versionType": "custom"
},
{
"lessThan": "17.2R3-S4",
"status": "affected",
"version": "17.2",
"versionType": "custom"
},
{
"lessThan": "17.3R3-S6",
"status": "affected",
"version": "17.3",
"versionType": "custom"
},
{
"lessThan": "17.4R2-S11, 17.4R3",
"status": "affected",
"version": "17.4",
"versionType": "custom"
},
{
"lessThan": "18.1R3-S11",
"status": "affected",
"version": "18.1",
"versionType": "custom"
},
{
"lessThan": "18.2R3-S6",
"status": "affected",
"version": "18.2",
"versionType": "custom"
},
{
"lessThan": "18.2X75-D41, 18.2X75-D430, 18.2X75-D53, 18.2X75-D65",
"status": "affected",
"version": "18.2X75",
"versionType": "custom"
},
{
"lessThan": "18.3R2-S4, 18.3R3",
"status": "affected",
"version": "18.3",
"versionType": "custom"
},
{
"lessThan": "18.4R2-S5, 18.4R3",
"status": "affected",
"version": "18.4",
"versionType": "custom"
},
{
"lessThan": "19.1R2",
"status": "affected",
"version": "19.1",
"versionType": "custom"
},
{
"lessThan": "19.2R1-S5, 19.2R2",
"status": "affected",
"version": "19.2",
"versionType": "custom"
},
{
"lessThan": "19.3R2",
"status": "affected",
"version": "19.3",
"versionType": "custom"
}
]
}
]References
Related
nessus
nessus
Juniper Junos OS MX Series DoS (JSA11077)
2020-10-30 00:00:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2020-10-16 21:15:00
nvd
nvd
CVE-2020-1680
2020-10-16 21:15:13
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
41.2%
Related for CVE-2020-1680