CVE-2020-1650 : What You Need to Know

On July 8, 2020, Juniper Networks reported a Denial of Service vulnerability in the MS-PIC component on MS-MIC or MS-MPC in Junos OS MX Series devices.

Understanding CVE-2020-1650

What is CVE-2020-1650?

The vulnerability in the MS-PIC component on Juniper Networks Junos MX Series can lead to a prolonged Denial of Service when specific packets are continuously sent, impacting the MS-PIC on MS-MIC/MS-MPC.

The Impact of CVE-2020-1650

This vulnerability presents a high severity risk with a CVSS base score of 7.5. However, Juniper SIRT has not detected any malicious exploitation at the time of reporting.

Technical Details of CVE-2020-1650

Vulnerability Description

When configured with a service card, certain packet streams can crash the MS-PIC component on MS-MIC or MS-MPC, causing a Denial of Service.

Affected Systems and Versions

Platforms: MX Series
Versions: 17.2R2-S7, 17.3R3-S4, 17.3R3-S5, 17.4R2-S4, 17.4R3, 18.1R3-S3 to 18.1R3-S8, 18.2R3, 18.2R3-S1, 18.2R3-S2, 18.3R2, 18.4R2, 19.1R1, 19.2R1, and 19.3R1

Exploitation Mechanism

Attack Complexity: Low
Attack Vector: Network
Impact: High availability
Privileges Required: None

Mitigation and Prevention

Immediate Steps to Take

Apply the available software patches: 17.2R2-S8, 17.3R3-S6, 17.4R3-S1, 18.1R3-S9, 18.2R3-S3, 18.3R3, 18.4R3, 19.1R2, 19.2R2, 19.3R2, 19.4R1, and all subsequent releases

Long-Term Security Practices

Regularly update and patch Junos OS to the latest version
Monitor and restrict network traffic to prevent the receipt of malicious packets

Patching and Updates

Juniper Networks has released updated software versions to address the vulnerability