What is CVE-2020-1613?

CVE-2020-1613 is a high-severity vulnerability in Juniper Ex2300, classified under CWE-710. CVSS score: 8.6/10. Published 2020-04-08.

How severe is CVE-2020-1613?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Juniper Ex2300

CVE-2020-1613

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that originally sent the specific BGP FlowSpec advertisement. This specific BGP FlowSpec advertisement received from a BGP peer might get propagated from a Junos OS device running the fixed release to another device that is vulnerable causing BGP session termination downstream. This issue affects IPv4 and IPv6 BGP FlowSpec deployment. This issue affects Juniper Networks Junos OS: 12.3; 12.3X48 on SRX Series; 14.1X53 on EX and QFX Series; 15.1 versions prior to 15.1R7-S5; 15.1F versions prior to 15.1F6-S13; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D497 on NFX Series; 15.1X53 versions prior to 15.1X53-D592 on EX2300/EX3400; 16.1 versions prior to 16.1R7-S7; 17.1 versions prior to 17.1R2-S12, 17.1R3; 17.2 versions prior to 17.2R2-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D102, 17.2X75-D110, 17.2X75-D44; 17.3 versions prior to 17.3R2-S5, 17.3R3-S5; 17.4 versions prior to 17.4R1-S8, 17.4R2; 18.1 versions prior to 18.1R2-S4, 18.1R3; 18.2X75 versions prior to 18.2X75-D20.

Published 2020-04-08 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.013 (70.4th percentile), scored 2026-10-19.

Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 70.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000

Affected products

Juniper Ex2300
Juniper Ex2300-C
Juniper Ex3400
Juniper Ex4300
Juniper Ex4600
Juniper Ex4650
Juniper Ex9200
Juniper Ex9250
Juniper Junos — versions 12.3, 15.1, 16.1
Juniper Nfx150

Weakness classification (CWE)

CWE-710

References

kb.juniper.net/JSA10996 (Vendor Advisory)

Frequently asked questions

What is CVE-2020-1613?: CVE-2020-1613 is a high-severity vulnerability in Juniper Ex2300, classified under CWE-710. CVSS score: 8.6/10. Published 2020-04-08.
How severe is CVE-2020-1613?: High severity. CVSS v3 base score is 8.6 out of 10.