CVE-2020-1611: Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.

Published Jan 15, 2020

Updated

A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.

Affected Software

9 affected components

Juniper Junos Space=17.1-r1

Juniper Junos Space=17.2-r1

Juniper Junos Space=18.1-r1

Juniper Junos Space=18.2-r1

Juniper Junos Space=18.3-r1

Juniper Junos Space=18.4-r1

Juniper Junos Space=19.1-r1

Juniper Junos Space=19.2-r1

Juniper Junos Space=19.3-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Networks Junos Space to a version that resolves this vulnerability.
Fixed in 19.4R1

Event History

Jan 15, 2020

CVE Published

via MITRE·08:40 AM

Data Sourced

via MITRE·08:40 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-1611?

CVE-2020-1611 is classified as a medium severity vulnerability.

How do I fix CVE-2020-1611?

To fix CVE-2020-1611, upgrade to Junos Space version 19.4R1 or later.

What systems are affected by CVE-2020-1611?

CVE-2020-1611 affects Juniper Networks Junos Space versions prior to 19.4R1.

What type of vulnerability is CVE-2020-1611?

CVE-2020-1611 is a Local File Inclusion vulnerability.

What can an attacker do with CVE-2020-1611?

An attacker can view all files on the target when the device receives malicious HTTP packets.