7.2
CVSSv2

CVE-2020-1664

Published: 16/10/2020 Updated: 05/02/2021
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

A stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service (DoS) against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17.3 versions before 17.3R3-S9; 17.4 versions before 17.4R2-S12, 17.4R3-S3; 18.1 versions before 18.1R3-S11; 18.2 versions before 18.2R3-S6; 18.2X75 versions before 18.2X75-D53, 18.2X75-D65; 18.3 versions before 18.3R2-S4, 18.3R3-S4; 18.4 versions before 18.4R2-S5, 18.4R3-S5; 19.1 versions before 19.1R3-S3; 19.2 versions before 19.2R1-S5, 19.2R3; 19.3 versions before 19.3R2-S4, 19.3R3; 19.4 versions before 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions before 20.1R1-S4, 20.1R2; 20.2 versions before 20.2R1-S1, 20.2R2. Versions of Junos OS before 17.3 are unaffected by this vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 17.3

juniper junos 17.4

juniper junos 18.1

juniper junos 18.2

juniper junos 18.2x75

juniper junos 18.3

juniper junos 18.4

juniper junos 19.1

juniper junos 19.2

juniper junos 19.3

juniper junos 19.4

juniper junos 20.1

juniper junos 20.2