CVE-2020-1631

Juniper Junos OS Path Traversal Vulnerability

Juniper Junos OSNetwork & edge

CVSS

8.8High

ExploitationExploited in the wildAdded to KEV 25 Mar 2022CISA KEV

Exploit odds (EPSS)4.87%Chance of exploitation activity in the next 30 days, higher than 92% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed in12.3R12-S16Also 12.3X48-D101, 12.3X48-D105, 14.1X53-D54 and 15 moreCVE List

Federal deadline15 Apr 2022Remediation due date for US federal agenciesCISA KEV

CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

12.3R12-S16Junos OSCVE List
12.3X48-D101, 12.3X48-D105Junos OSCVE List
14.1X53-D54Junos OSCVE List
15.1R7-S7Junos OSCVE List
15.1X49-D211, 15.1X49-D220Junos OSCVE List
16.1R7-S8Junos OSCVE List

Show all 18 fixed versions

17.2R3-S4Junos OSCVE List
17.3R3-S8Junos OSCVE List
17.4R2-S11, 17.4R3-S2Junos OSCVE List
18.1R3-S10Junos OSCVE List
18.2R2-S7, 18.2R3-S4Junos OSCVE List
18.3R2-S4, 18.3R3-S2Junos OSCVE List
18.4R1-S7, 18.4R3-S2Junos OSCVE List
19.1R1-S5, 19.1R3-S1Junos OSCVE List
19.2R2Junos OSCVE List
19.3R2-S3, 19.3R3Junos OSCVE List
19.4R1-S2, 19.4R2Junos OSCVE List
20.1R1-S1, 20.1R2Junos OSCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

4 May 2020, 09:25 UTCPublishedCVE List
25 Mar 2022Added to CISA KEVCISA KEV

Description

A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.

Text from CVE List

Affected versions 18

Junos OSaffected: 12.3 before 12.3R12-S16CVE List
Junos OSaffected: 12.3X48 before 12.3X48-D101, 12.3X48-D105CVE List
Junos OSaffected: 14.1X53 before 14.1X53-D54CVE List
Junos OSaffected: 15.1 before 15.1R7-S7CVE List
Junos OSaffected: 15.1X49 before 15.1X49-D211, 15.1X49-D220CVE List
Junos OSaffected: 16.1 before 16.1R7-S8CVE List
Junos OSaffected: 17.2 before 17.2R3-S4CVE List
Junos OSaffected: 17.3 before 17.3R3-S8CVE List
Junos OSaffected: 17.4 before 17.4R2-S11, 17.4R3-S2CVE List
Junos OSaffected: 18.1 before 18.1R3-S10CVE List
Junos OSaffected: 18.2 before 18.2R2-S7, 18.2R3-S4CVE List
Junos OSaffected: 18.3 before 18.3R2-S4, 18.3R3-S2CVE List
Junos OSaffected: 18.4 before 18.4R1-S7, 18.4R3-S2CVE List
Junos OSaffected: 19.1 before 19.1R1-S5, 19.1R3-S1CVE List
Junos OSaffected: 19.2 before 19.2R2CVE List
Junos OSaffected: 19.3 before 19.3R2-S3, 19.3R3CVE List
Junos OSaffected: 19.4 before 19.4R1-S2, 19.4R2CVE List
Junos OSaffected: 20.1 before 20.1R1-S1, 20.1R2CVE List