Read the docs
TI-2020-01608 Aliases CVE-2020-1657GHSA-x66f-9p5x-42r4

Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.

Priority LOW 35CWE-408Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association (SA) is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these spoofed packets can cause a sustained Denial of Service (DoS) condition. This issue affects IPv4 and IPv6 implementations. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D190; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S6, 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2. This issue does not affect 12.3 or 15.1 releases which are non-SRX Series releases.

Why it matters now

EPSS 0.01288 70th percentileScored 2026-11-07
Fix Fixed Junos OS (Juniper Networks): 12.3X48-D90, 15.1X49-D190, 17.4R2-S9 +11

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JuniperJunos OS12.3X48 to before 12.3X48-D90; 15.1X49 to before 15.1X49-D190; 17.4 to before 17.4R2-S9, 17.4R3; 18.1 to before 18.1R3-S9; 18.2 to before 18.2R3; 18.3 to before 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 to before 18.4R1-S6, 18.4R2-S3, 18.4R3; 19.1 to before 19.1R1-S4, 19.1R212.3X48-D90, 15.1X49-D190, 17.4R2-S9, 17.4R3, 18.1R3-S9, 18.2R3, 18.3R1-S7, 18.3R2-S3, 18.3R3, 18.4R1-S6, 18.4R2-S3, 18.4R3, 19.1R1-S4, 19.1R2Patch availableCNA
  • Junos OS VendorJuniper Affected 12.3X48 to before 12.3X48-D90; 15.1X49 to before 15.1X49-D190; 17.4 to before 17.4R2-S9, 17.4R3; 18.1 to before 18.1R3-S9; 18.2 to before 18.2R3; 18.3 to before 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 to before 18.4R1-S6, 18.4R2-S3, 18.4R3; 19.1 to before 19.1R1-S4, 19.1R2 Fixed in 12.3X48-D90, 15.1X49-D190, 17.4R2-S9, 17.4R3, 18.1R3-S9, 18.2R3, 18.3R1-S7, 18.3R2-S3, 18.3R3, 18.4R1-S6, 18.4R2-S3, 18.4R3, 19.1R1-S4, 19.1R2 Patch available CNA

CPE configurations NVD · 97

CPEVersionsRoleVendor
cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*12.3x48VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*12.3x48 d10VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*12.3x48 d15VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*12.3x48 d20VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*12.3x48 d25VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*12.3x48 d30VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*12.3x48 d35VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*12.3x48 d40VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*12.3x48 d45VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*12.3x48 d50VulnerableJuniper
  • cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:* Versions 12.3x48 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:* Versions 12.3x48 d10 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:* Versions 12.3x48 d15 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:* Versions 12.3x48 d20 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:* Versions 12.3x48 d25 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:* Versions 12.3x48 d30 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:* Versions 12.3x48 d35 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:* Versions 12.3x48 d40 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:* Versions 12.3x48 d45 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:* Versions 12.3x48 d50 Vulnerable ·Juniper
Show 87 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:juniper:junos:12.3x48:d51:*:*:*:*:*:*12.3x48 d51VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*12.3x48 d55VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:*12.3x48 d60VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d65:*:*:*:*:*:*12.3x48 d65VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:*12.3x48 d70VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d75:*:*:*:*:*:*12.3x48 d75VulnerableJuniper
cpe:2.3:o:juniper:junos:12.3x48:d80:*:*:*:*:*:*12.3x48 d80VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*15.1x49VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*15.1x49 d10VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*15.1x49 d100VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*15.1x49 d110VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*15.1x49 d120VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*15.1x49 d130VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*15.1x49 d140VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*15.1x49 d15VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*15.1x49 d150VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*15.1x49 d160VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*15.1x49 d170VulnerableJuniper
cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*15.1x49 d180VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*17.4VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*17.4 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*17.4 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*17.4 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*17.4 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*17.4 r1-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*17.4 r1-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*17.4 r1-s7VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*17.4 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*17.4 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*17.4 r2-s10VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*17.4 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*17.4 r2-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*17.4 r2-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*17.4 r2-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*17.4 r2-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*17.4 r2-s7VulnerableJuniper
cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*17.4 r2-s8VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*18.1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*18.1 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*18.1 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*18.1 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*18.1 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*18.1 r2-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*18.1 r3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*18.1 r3-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*18.1 r3-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*18.1 r3-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*18.1 r3-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*18.1 r3-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*18.1 r3-s7VulnerableJuniper
cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*18.1 r3-s8VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*18.2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*18.2 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*18.2 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*18.2 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*18.2 r1-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*18.2 r1-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*18.2 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*18.2 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*18.2 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*18.2 r2-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*18.2 r2-s4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*18.2 r2-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*18.2 r2-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*18.3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*18.3 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*18.3 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*18.3 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*18.3 r1-s3VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*18.3 r1-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*18.3 r1-s6VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*18.3 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*18.3 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*18.3 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*18.4VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*18.4 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*18.4 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*18.4 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*18.4 r1-s5VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*18.4 r2VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*18.4 r2-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*18.4 r2-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*19.1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*19.1 r1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*19.1 r1-s1VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*19.1 r1-s2VulnerableJuniper
cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*19.1 r1-s3VulnerableJuniper
  • cpe:2.3:o:juniper:junos:12.3x48:d51:*:*:*:*:*:* Versions 12.3x48 d51 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:* Versions 12.3x48 d55 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:* Versions 12.3x48 d60 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d65:*:*:*:*:*:* Versions 12.3x48 d65 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:* Versions 12.3x48 d70 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d75:*:*:*:*:*:* Versions 12.3x48 d75 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:12.3x48:d80:*:*:*:*:*:* Versions 12.3x48 d80 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:* Versions 15.1x49 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:* Versions 15.1x49 d10 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:* Versions 15.1x49 d100 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:* Versions 15.1x49 d110 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:* Versions 15.1x49 d120 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:* Versions 15.1x49 d130 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:* Versions 15.1x49 d140 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:* Versions 15.1x49 d15 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:* Versions 15.1x49 d150 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:* Versions 15.1x49 d160 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:* Versions 15.1x49 d170 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:* Versions 15.1x49 d180 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:* Versions 17.4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:* Versions 17.4 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:* Versions 17.4 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:* Versions 17.4 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:* Versions 17.4 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:* Versions 17.4 r1-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:* Versions 17.4 r1-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:* Versions 17.4 r1-s7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:* Versions 17.4 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:* Versions 17.4 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:* Versions 17.4 r2-s10 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:* Versions 17.4 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:* Versions 17.4 r2-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:* Versions 17.4 r2-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:* Versions 17.4 r2-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:* Versions 17.4 r2-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:* Versions 17.4 r2-s7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:* Versions 17.4 r2-s8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:* Versions 18.1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:* Versions 18.1 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:* Versions 18.1 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:* Versions 18.1 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:* Versions 18.1 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:* Versions 18.1 r2-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:* Versions 18.1 r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:* Versions 18.1 r3-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:* Versions 18.1 r3-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:* Versions 18.1 r3-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:* Versions 18.1 r3-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:* Versions 18.1 r3-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:* Versions 18.1 r3-s7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:* Versions 18.1 r3-s8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:* Versions 18.2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:* Versions 18.2 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:* Versions 18.2 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:* Versions 18.2 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:* Versions 18.2 r1-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:* Versions 18.2 r1-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:* Versions 18.2 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:* Versions 18.2 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:* Versions 18.2 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:* Versions 18.2 r2-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:* Versions 18.2 r2-s4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:* Versions 18.2 r2-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:* Versions 18.2 r2-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:* Versions 18.3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:* Versions 18.3 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:* Versions 18.3 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:* Versions 18.3 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:* Versions 18.3 r1-s3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:* Versions 18.3 r1-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:* Versions 18.3 r1-s6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:* Versions 18.3 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:* Versions 18.3 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:* Versions 18.3 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:* Versions 18.4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:* Versions 18.4 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:* Versions 18.4 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:* Versions 18.4 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:* Versions 18.4 r1-s5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:* Versions 18.4 r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:* Versions 18.4 r2-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:* Versions 18.4 r2-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:* Versions 19.1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:* Versions 19.1 r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:* Versions 19.1 r1-s1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:* Versions 19.1 r1-s2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:* Versions 19.1 r1-s3 Vulnerable ·Juniper

Remediation

  • Fix · CNA Junos OS (Juniper Networks) Fixed in 12.3X48-D90, 15.1X49-D190, 17.4R2-S9, 17.4R3, 18.1R3-S9, 18.2R3, 18.3R1-S7, 18.3R2-S3, 18.3R3, 18.4R1-S6, 18.4R2-S3, 18.4R3, 19.1R1-S4, 19.1R2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1657
  2. 2026-10-03 Alias added: GHSA-x66f-9p5x-42r4

References

Advisory 1

  • TI-2023-18638 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01585 Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
  • TI-2025-15550 Junos OS: An local attacker with shell access can execute arbitrary code KEVCVSS 4.0MEDIUM 6.7
  • TI-2023-18644 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files KEVCVSS 3.1MEDIUM 5.3
  • TI-2023-18640 Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files KEVCVSS 3.1MEDIUM 5.3
See all 792 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences