CVE-2020-1634

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This issue affects: Juniper Networks Junos OS 12.3X48 version 12.3X48-D80 and later versions prior to 12.3X48-D95 on High-End SRX Series. This issue does not affect Branch SRX Series devices.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-190

Affected Products (26)

juniper · junosvulnerable

juniper · srx1500

juniper · srx300

juniper · srx4100

juniper · srx4200

juniper · srx4600

juniper · srx5400

juniper · srx550

juniper · srx5600

juniper · srx5800

References (2)

https://kb.juniper.net/JSA11014

Vendor Advisory

https://kb.juniper.net/JSA11014

Vendor Advisory