ID

VAR-202010-0386


CVE

CVE-2020-1657


TITLE

Juniper Networks Junos OS  Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2020-012191

DESCRIPTION

On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association (SA) is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these spoofed packets can cause a sustained Denial of Service (DoS) condition. This issue affects IPv4 and IPv6 implementations. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D190; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S6, 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2. This issue does not affect 12.3 or 15.1 releases which are non-SRX Series releases. Juniper Networks Junos OS Contains an unspecified vulnerability.Denial of service (DoS) It may be put into a state. The operating system provides a secure programming interface and Junos SDK. There is a security vulnerability in Junos OS, which can be exploited by an attacker to trigger a fatal error through IPSec spoofing packet SRX to trigger a denial of service

Trust: 1.8

sources: NVD: CVE-2020-1657 // JVNDB: JVNDB-2020-012191 // VULHUB: VHN-169661 // VULMON: CVE-2020-1657

AFFECTED PRODUCTS

vendor:junipermodel:junosscope:eqversion:18.1

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:17.4

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:18.2

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:12.3x48

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:15.1x49

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:19.1

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:18.4

Trust: 1.0

vendor:junipermodel:junosscope:eqversion:18.3

Trust: 1.0

vendor:ジュニパーネットワークスmodel:junos osscope:eqversion: -

Trust: 0.8

vendor:ジュニパーネットワークスmodel:junos osscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2020-012191 // NVD: CVE-2020-1657

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-1657
value: MEDIUM

Trust: 1.0

sirt@juniper.net: CVE-2020-1657
value: HIGH

Trust: 1.0

NVD: CVE-2020-1657
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202010-664
value: HIGH

Trust: 0.6

VULHUB: VHN-169661
value: MEDIUM

Trust: 0.1

VULMON: CVE-2020-1657
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-1657
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-169661
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sirt@juniper.net: CVE-2020-1657
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

OTHER: JVNDB-2020-012191
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-169661 // VULMON: CVE-2020-1657 // JVNDB: JVNDB-2020-012191 // CNNVD: CNNVD-202010-664 // NVD: CVE-2020-1657 // NVD: CVE-2020-1657

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:CWE-408

Trust: 1.0

problemtype:Lack of information (CWE-noinfo) [NVD Evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2020-012191 // NVD: CVE-2020-1657

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202010-664

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202010-664

PATCH

title:JSA11050url:https://kb.juniper.net/JSA11050

Trust: 0.8

title:Juniper Networks Junos OS Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=130737

Trust: 0.6

sources: JVNDB: JVNDB-2020-012191 // CNNVD: CNNVD-202010-664

EXTERNAL IDS

db:NVDid:CVE-2020-1657

Trust: 2.6

db:JUNIPERid:JSA11050

Trust: 1.8

db:JVNDBid:JVNDB-2020-012191

Trust: 0.8

db:CNNVDid:CNNVD-202010-664

Trust: 0.7

db:AUSCERTid:ESB-2020.3563

Trust: 0.6

db:VULHUBid:VHN-169661

Trust: 0.1

db:VULMONid:CVE-2020-1657

Trust: 0.1

sources: VULHUB: VHN-169661 // VULMON: CVE-2020-1657 // JVNDB: JVNDB-2020-012191 // CNNVD: CNNVD-202010-664 // NVD: CVE-2020-1657

REFERENCES

url:https://kb.juniper.net/jsa11050

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2020-1657

Trust: 1.4

url:https://vigilance.fr/vulnerability/junos-os-srx-denial-of-service-via-ipsec-spoofed-packets-33577

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2020.3563/

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://exchange.xforce.ibmcloud.com/vulnerabilities/189897

Trust: 0.1

sources: VULHUB: VHN-169661 // VULMON: CVE-2020-1657 // JVNDB: JVNDB-2020-012191 // CNNVD: CNNVD-202010-664 // NVD: CVE-2020-1657

SOURCES

db:VULHUBid:VHN-169661
db:VULMONid:CVE-2020-1657
db:JVNDBid:JVNDB-2020-012191
db:CNNVDid:CNNVD-202010-664
db:NVDid:CVE-2020-1657

LAST UPDATE DATE

2024-08-14T14:32:02.455000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-169661date:2020-10-27T00:00:00
db:VULMONid:CVE-2020-1657date:2020-10-27T00:00:00
db:JVNDBid:JVNDB-2020-012191date:2021-04-27T05:33:00
db:CNNVDid:CNNVD-202010-664date:2020-10-28T00:00:00
db:NVDid:CVE-2020-1657date:2020-10-27T19:08:12.713

SOURCES RELEASE DATE

db:VULHUBid:VHN-169661date:2020-10-16T00:00:00
db:VULMONid:CVE-2020-1657date:2020-10-16T00:00:00
db:JVNDBid:JVNDB-2020-012191date:2021-04-27T00:00:00
db:CNNVDid:CNNVD-202010-664date:2020-10-15T00:00:00
db:NVDid:CVE-2020-1657date:2020-10-16T21:15:12.223