CVE-2020-1630

Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.

State
Published
Severity
5.0 Medium
Published
Apr 8, 2020
Updated
Sep 16, 2024
Reserved
Nov 4, 2019

Read the record on cve.org

Description

A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual Routing Engines (RE), Virtual Chassis (VC) or high-availability cluster may allow a local authenticated low-privileged user with access to the shell to perform unauthorized configuration modification. This issue does not affect Junos OS device with single RE or stand-alone configuration. This issue affects Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S14; 12.3X48 versions prior to 12.3X48-D86, 12.3X48-D90; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1R7-S6; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190; 15.1X53 versions prior to 15.1X53-D592; 16.1 versions prior to 16.1R4-S13, 16.1R7-S6; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R2-S11, 17.1R3-S1; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S7; 18.2 versions prior to 18.2R2-S5, 18.2R3-S1; 18.2 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D420, 18.2X75-D60, 18.2X75-D411; 18.3 versions prior to 18.3R1-S5, 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R1-S4, 18.4R2-S1, 18.4R3; 19.1 versions prior to 19.1R1-S2, 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2.

Scores

CVSSScoreVectorSource
3.15.0 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:Njuniper

Weaknesses

  • CWE-264 Permissions, Privileges, and Access Controls
  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 12.3 to before 12.3R12-S14Affected
  • 12.3X48 to before 12.3X48-D86, 12.3X48-D90Affected
  • 14.1X53 to before 14.1X53-D51Affected
  • 15.1 to before 15.1R7-S6Affected
  • 15.1X49 to before 15.1X49-D181, 15.1X49-D190Affected
  • 15.1X53 to before 15.1X53-D592Affected
  • 16.1 to before 16.1R4-S13, 16.1R7-S6Affected
  • 16.2 to before 16.2R2-S10Affected
  • 17.1 to before 17.1R2-S11, 17.1R3-S1Affected
  • 17.2 to before 17.2R1-S9, 17.2R3-S3Affected
  • 17.3 to before 17.3R3-S6Affected
  • 17.4 to before 17.4R2-S6, 17.4R3Affected
  • 18.1 to before 18.1R3-S7Affected
  • 18.2 to before 18.2R2-S5, 18.2R3-S1Affectedfrom 18.2X75-D12, 18.2X75-D33, 18.2X75-D420, 18.2X75-D60,18.2X75-D411Not affected
  • 18.3 to before 18.3R1-S5, 18.3R2-S1, 18.3R3Affected
  • 18.4 to before 18.4R1-S4, 18.4R2-S1, 18.4R3Affected
  • 19.1 to before 19.1R1-S2, 19.1R2Affected
  • 19.2 to before 19.2R1-S1, 19.2R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.