PT-2020-1509 · Juniper Networks · Junos Evolved+1

Longfei Fan · Published 2020-01-08 · Updated 2020-01-22 · CVE-2020-1609

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions 15.1 through 19.2 Junos OS Evolved versions prior to 19.3R1

Description The issue affects the Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos OS Evolved when configured in relay mode, allowing an attacker to send crafted IPv6 packets and execute commands as root on the target device. This issue specifically affects IPv6 JDHCPD services.

Recommendations For Junos OS versions 15.1 through 19.2, update to a version that is not affected by this issue, such as 19.3R1 or later. For Junos OS Evolved versions prior to 19.3R1, update to version 19.3R1 or later. As a temporary workaround, consider disabling the JDHCPD service in relay mode until a patch is available. Restrict access to the JDHCPD service to minimize the risk of exploitation.

Fix

OS Command Injection

Stack Overflow

Weakness Enumeration

CWE-78

CWE-121

Related Identifiers

BDU:2020-00492

CVE-2020-1609

Affected Products

Junos

Junos Evolved

References · 7

• https://bdu.fstec.ru/vul/2020-00492 · Security Note
• https://kb.juniper.net/JSA10981 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1609 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1609 · Vendor Advisory
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10981&cat=SIRT_1&actp=LIST · Note
• https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1449353 · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10981&cat=SIRT_1&actp=LIST · Note