CVE-2020-1604 : Exploit Details and Defense Strategies

On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. Learn about the impact, technical details, and mitigation steps for this CVE.

Understanding CVE-2020-1604

This CVE affects Junos OS devices with stateless IPv4 or IPv6 firewall filter configurations.

What is CVE-2020-1604?

Juniper Networks Junos OS devices are impacted by a vulnerability in the IP firewall filter component, leading to the failure of firewall filter evaluation for specific packets.

The Impact of CVE-2020-1604

This issue affects the evaluation of certain packets destined to the device Routing Engine (RE).
It does not impact Layer 2 or Layer 3 firewall filter evaluation for connected hosts.
Vulnerable devices include QFX5100, EX4600, QFX3500, and EX4300 Series.

Technical Details of CVE-2020-1604

This section covers the vulnerability description, affected systems, and exploitation mechanism.

Vulnerability Description

The vulnerability in the IP firewall filter component may lead to the failure of evaluating specific packets.

Affected Systems and Versions

Affected Platforms: QFX5100, EX4600, QFX3500, and EX4300 Series
Vulnerable Versions: Multiple versions of Junos OS including 14.1X53, 15.1, 16.1, 17.1, 17.2, 17.3, 17.4, 18.1, and 18.2

Exploitation Mechanism

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
CVSS Base Score: 6.5 (Medium)

Mitigation and Prevention

Learn how to address and prevent the CVE-2020-1604 vulnerability.

Immediate Steps to Take

Update affected devices to the following software releases:
For QFX5100 Series and EX4600 Series: 14.1X53-D12 and later
For QFX3500 Series: 14.1X53-D52 and later
For EX4300 Series: 14.1X53-D48, 15.1R7-S3, 16.1R7, and subsequent releases

Long-Term Security Practices

Regularly update Junos OS to the latest versions to patch security vulnerabilities
Monitor vendor advisories and implement recommended security measures

Patching and Updates

Ensure your devices are running the latest software releases to mitigate this vulnerability