What is CVE-2020-1603?

CVE-2020-1603 is a high-severity vulnerability in Juniper Junos, classified under CWE-710. CVSS score: 8.6/10. Published 2020-01-15.

How severe is CVE-2020-1603?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Juniper Junos

CVE-2020-1603

Specific IPv6 packets sent by clients processed by the Routing Engine (RE) are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress…

EPSS: 0.014 (69.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Juniper Junos — versions 16.1, 16.1x70, 16.2
Juniper Networks Junos Os — versions 16.1, 16.2, 17.1

Weakness classification (CWE)

References

sirt@juniper.net (x_refsource_CONFIRM, Vendor Advisory)
sirt@juniper.net (Permissions Required, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-1603?: CVE-2020-1603 is a high-severity vulnerability in Juniper Junos, classified under CWE-710. CVSS score: 8.6/10. Published 2020-01-15.
How severe is CVE-2020-1603?: High severity. CVSS v3 base score is 8.6 out of 10.