4.3
CVSSv2

CVE-2020-1684

Published: 16/10/2020 Updated: 01/01/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilization, which could lead to traffic interruption. Application identification is enabled by default and is automatically turned on when Intrusion Detection and Prevention (IDP), AppFW, AppQoS, or AppTrack is configured. Thus, this issue might occur when IDP, AppFW, AppQoS, or AppTrack is configured. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions before 12.3X48-D105; 15.1X49 versions before 15.1X49-D221, 15.1X49-D230; 17.4 versions before 17.4R3-S3; 18.1 versions before 18.1R3-S11; 18.2 versions before 18.2R3-S3; 18.3 versions before 18.3R2-S4, 18.3R3-S2; 18.4 versions before 18.4R2-S5, 18.4R3-S1; 19.1 versions before 19.1R2-S2, 19.1R3; 19.2 versions before 19.2R1-S5, 19.2R2; 19.3 versions before 19.3R3; 19.4 versions before 19.4R2.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 12.3x48

juniper junos 15.1x49

juniper junos 17.4

juniper junos 18.1

juniper junos 18.2

juniper junos 18.3

juniper junos 18.4

juniper junos 19.1

juniper junos 19.2

juniper junos 19.3

juniper junos 19.4