What is the severity of CVE-2020-1618?

CVE-2020-1618 is designated as a high severity vulnerability due to its authentication bypass nature.

How do I fix CVE-2020-1618?

To fix CVE-2020-1618, you should update to a fixed version of Juniper JUNOS as provided by the vendor's advisory.

What devices are affected by CVE-2020-1618?

CVE-2020-1618 affects various Juniper EX and QFX Series devices running specific versions of Junos OS.

Can CVE-2020-1618 be exploited remotely?

CVE-2020-1618 requires local access to the console port, reducing the likelihood of remote exploitation.

What actions should be taken if CVE-2020-1618 is identified?

If CVE-2020-1618 is identified, immediate action should include patching the firmware and reviewing access logs for unauthorized activity.

Vulnerability/
CVE-2020-1618

medium

6.9

CWE

287 288

8/4/2020

17/9/2024

CVE-2020-1618: Junos OS: EX and QFX Series: Console port authentication bypass vulnerability

First published: Wed Apr 08 2020(Updated: )

On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without any password. This issue might only occur in certain scenarios: • At the first reboot after performing device factory reset using the command “request system zeroize”; or • A temporary moment during the first reboot after the software upgrade when the device configured in Virtual Chassis mode. This issue affects Juniper Networks Junos OS on EX and QFX Series: 14.1X53 versions prior to 14.1X53-D53; 15.1 versions prior to 15.1R7-S4; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S4; 17.1 versions prior to 17.1R2-S11, 17.1R3-S1; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R2-S5, 17.3R3-S6; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2; 18.3 versions prior to 18.3R1-S7, 18.3R2. This issue does not affect Juniper Networks Junos OS 12.3.

Credit: sirt@juniper.net

Affected Software	Affected Version	How to fix
Junos OS Evolved	=14.1x53
Junos OS Evolved	=14.1x53-d10
Junos OS Evolved	=14.1x53-d15
Junos OS Evolved	=14.1x53-d16
Junos OS Evolved	=14.1x53-d25
Junos OS Evolved	=14.1x53-d26
Junos OS Evolved	=14.1x53-d27
Junos OS Evolved	=14.1x53-d30
Junos OS Evolved	=14.1x53-d35
Junos OS Evolved	=14.1x53-d40
Junos OS Evolved	=14.1x53-d42
Junos OS Evolved	=14.1x53-d43
Junos OS Evolved	=14.1x53-d44
Junos OS Evolved	=14.1x53-d45
Junos OS Evolved	=14.1x53-d48
Junos OS Evolved	=14.1x53-d50
Junos OS Evolved	=14.1x53-d51
Junos OS Evolved	=14.1x53-d52
Junos OS Evolved	=15.1
Junos OS Evolved	=15.1-a1
Junos OS Evolved	=15.1-f
Junos OS Evolved	=15.1-f1
Junos OS Evolved	=15.1-f2
Junos OS Evolved	=15.1-f2-s1
Junos OS Evolved	=15.1-f2-s2
Junos OS Evolved	=15.1-f2-s3
Junos OS Evolved	=15.1-f2-s4
Junos OS Evolved	=15.1-f3
Junos OS Evolved	=15.1-f4
Junos OS Evolved	=15.1-f5
Junos OS Evolved	=15.1-f5-s7
Junos OS Evolved	=15.1-f6
Junos OS Evolved	=15.1-f6-s1
Junos OS Evolved	=15.1-f6-s12
Junos OS Evolved	=15.1-f6-s2
Junos OS Evolved	=15.1-f6-s3
Junos OS Evolved	=15.1-f6-s4
Junos OS Evolved	=15.1-f6-s7
Junos OS Evolved	=15.1-f7
Junos OS Evolved	=15.1-r1
Junos OS Evolved	=15.1-r2
Junos OS Evolved	=15.1-r3
Junos OS Evolved	=15.1-r4
Junos OS Evolved	=15.1-r4-s7
Junos OS Evolved	=15.1-r4-s8
Junos OS Evolved	=15.1-r4-s9
Junos OS Evolved	=15.1-r5
Junos OS Evolved	=15.1-r5-s1
Junos OS Evolved	=15.1-r5-s5
Junos OS Evolved	=15.1-r5-s6
Junos OS Evolved	=15.1-r6
Junos OS Evolved	=15.1-r6-s1
Junos OS Evolved	=15.1-r6-s2
Junos OS Evolved	=15.1-r6-s6
Junos OS Evolved	=15.1-r7
Junos OS Evolved	=15.1-r7-s1
Junos OS Evolved	=15.1-r7-s2
Junos OS Evolved	=15.1-r7-s3
Junos OS Evolved	=15.1x53
Junos OS Evolved	=15.1x53-d10
Junos OS Evolved	=15.1x53-d20
Junos OS Evolved	=15.1x53-d21
Junos OS Evolved	=15.1x53-d210
Junos OS Evolved	=15.1x53-d230
Junos OS Evolved	=15.1x53-d231
Junos OS Evolved	=15.1x53-d232
Junos OS Evolved	=15.1x53-d233
Junos OS Evolved	=15.1x53-d234
Junos OS Evolved	=15.1x53-d235
Junos OS Evolved	=15.1x53-d236
Junos OS Evolved	=15.1x53-d237
Junos OS Evolved	=15.1x53-d25
Junos OS Evolved	=15.1x53-d30
Junos OS Evolved	=15.1x53-d31
Junos OS Evolved	=15.1x53-d32
Junos OS Evolved	=15.1x53-d33
Junos OS Evolved	=15.1x53-d34
Junos OS Evolved	=15.1x53-d40
Junos OS Evolved	=15.1x53-d45
Junos OS Evolved	=15.1x53-d47
Junos OS Evolved	=15.1x53-d470
Junos OS Evolved	=15.1x53-d48
Junos OS Evolved	=15.1x53-d495
Junos OS Evolved	=15.1x53-d50
Junos OS Evolved	=15.1x53-d51
Junos OS Evolved	=15.1x53-d52
Junos OS Evolved	=15.1x53-d55
Junos OS Evolved	=15.1x53-d56
Junos OS Evolved	=15.1x53-d57
Junos OS Evolved	=15.1x53-d58
Junos OS Evolved	=15.1x53-d59
Junos OS Evolved	=15.1x53-d590
Junos OS Evolved	=15.1x53-d591
Junos OS Evolved	=15.1x53-d592
Junos OS Evolved	=15.1x53-d60
Junos OS Evolved	=15.1x53-d61
Junos OS Evolved	=15.1x53-d62
Junos OS Evolved	=15.1x53-d63
Junos OS Evolved	=15.1x53-d64
Junos OS Evolved	=15.1x53-d65
Junos OS Evolved	=15.1x53-d66
Junos OS Evolved	=15.1x53-d67
Junos OS Evolved	=15.1x53-d68
Junos OS Evolved	=15.1x53-d69
Junos OS Evolved	=15.1x53-d70
Junos OS Evolved	=16.1
Junos OS Evolved	=16.1-r1
Junos OS Evolved	=16.1-r2
Junos OS Evolved	=16.1-r3
Junos OS Evolved	=16.1-r3-s10
Junos OS Evolved	=16.1-r3-s11
Junos OS Evolved	=16.1-r4
Junos OS Evolved	=16.1-r4-s12
Junos OS Evolved	=16.1-r4-s2
Junos OS Evolved	=16.1-r4-s3
Junos OS Evolved	=16.1-r4-s4
Junos OS Evolved	=16.1-r4-s6
Junos OS Evolved	=16.1-r5
Junos OS Evolved	=16.1-r5-s4
Junos OS Evolved	=16.1-r6-s1
Junos OS Evolved	=16.1-r6-s6
Junos OS Evolved	=16.1-r7
Junos OS Evolved	=16.1-r7-s2
Junos OS Evolved	=16.1-r7-s3
Junos OS Evolved	=17.1
Junos OS Evolved	=17.1-r1
Junos OS Evolved	=17.1-r2
Junos OS Evolved	=17.1-r2-s1
Junos OS Evolved	=17.1-r2-s10
Junos OS Evolved	=17.1-r2-s2
Junos OS Evolved	=17.1-r2-s3
Junos OS Evolved	=17.1-r2-s4
Junos OS Evolved	=17.1-r2-s5
Junos OS Evolved	=17.1-r2-s6
Junos OS Evolved	=17.1-r2-s7
Junos OS Evolved	=17.1-r2-s8
Junos OS Evolved	=17.1-r2-s9
Junos OS Evolved	=17.1-r3
Junos OS Evolved	=17.2
Junos OS Evolved	=17.2-r1
Junos OS Evolved	=17.2-r1-s1
Junos OS Evolved	=17.2-r1-s2
Junos OS Evolved	=17.2-r1-s3
Junos OS Evolved	=17.2-r1-s4
Junos OS Evolved	=17.2-r1-s5
Junos OS Evolved	=17.2-r1-s7
Junos OS Evolved	=17.2-r1-s8
Junos OS Evolved	=17.2-r2
Junos OS Evolved	=17.2-r2-s6
Junos OS Evolved	=17.2-r2-s7
Junos OS Evolved	=17.2-r3-s1
Junos OS Evolved	=17.2-r3-s2
Junos OS Evolved	=17.3
Junos OS Evolved	=17.3-r1-s1
Junos OS Evolved	=17.3-r2
Junos OS Evolved	=17.3-r2-s1
Junos OS Evolved	=17.3-r2-s2
Junos OS Evolved	=17.3-r2-s3
Junos OS Evolved	=17.3-r2-s4
Junos OS Evolved	=17.3-r3
Junos OS Evolved	=17.3-r3-s1
Junos OS Evolved	=17.3-r3-s2
Junos OS Evolved	=17.3-r3-s3
Junos OS Evolved	=17.3-r3-s4
Junos OS Evolved	=17.3-r3-s5
Junos OS Evolved	=17.4
Junos OS Evolved	=17.4-r1
Junos OS Evolved	=17.4-r1-s1
Junos OS Evolved	=17.4-r1-s2
Junos OS Evolved	=17.4-r1-s4
Junos OS Evolved	=17.4-r1-s5
Junos OS Evolved	=17.4-r1-s6
Junos OS Evolved	=17.4-r1-s7
Junos OS Evolved	=17.4-r2
Junos OS Evolved	=17.4-r2-s1
Junos OS Evolved	=17.4-r2-s2
Junos OS Evolved	=17.4-r2-s3
Junos OS Evolved	=17.4-r2-s4
Junos OS Evolved	=17.4-r2-s5
Junos OS Evolved	=17.4-r2-s6
Junos OS Evolved	=17.4-r2-s7
Junos OS Evolved	=17.4-r2-s8
Junos OS Evolved	=18.1
Junos OS Evolved	=18.1-r2
Junos OS Evolved	=18.1-r2-s1
Junos OS Evolved	=18.1-r2-s2
Junos OS Evolved	=18.1-r2-s4
Junos OS Evolved	=18.1-r3
Junos OS Evolved	=18.1-r3-s1
Junos OS Evolved	=18.1-r3-s2
Junos OS Evolved	=18.1-r3-s3
Junos OS Evolved	=18.1-r3-s4
Junos OS Evolved	=18.1-r3-s6
Junos OS Evolved	=18.1-r3-s7
Junos OS Evolved	=18.2
Junos OS Evolved	=18.3
Junos OS Evolved	=18.3-r1
Junos OS Evolved	=18.3-r1-s1
Junos OS Evolved	=18.3-r1-s2
Junos OS Evolved	=18.3-r1-s3
Junos OS Evolved	=18.3-r1-s4
Junos OS Evolved	=18.3-r1-s5
Junos OS Evolved	=18.3-r1-s6
Juniper EX2300-24T
Juniper EX2300-C
Juniper EX3400
Juniper EX4300-24T
Juniper EX4600
Juniper EX4650
Juniper QFX10002-60C
Juniper Networks QFX-Series
Juniper Networks QFX-Series
Juniper QFX5100
Juniper QFX5110
Juniper QFX5120
Juniper QFX5200-32C
Juniper QFX5210-64C
Juniper QFX5220

Remedy

The following software releases have been updated to resolve this specific issue: 14.1X53-D53, 15.1X53-D593, 15.1R7-S4, 16.1R7-S4, 17.1R2-S11, 17.1R3-S1, 17.2R3-S3, 17.3R2-S5, 17.3R3-S6, 17.4R2-S9, 17.4R3, 18.1R3-S8, 18.2R2, 18.3R1-S7, 18.3R2, 18.4R1, and all subsequent releases.

Never miss a vulnerability like this again

Reference Links

https://kb.juniper.net/JSA11001

Frequently Asked Questions

What is the severity of CVE-2020-1618?
CVE-2020-1618 is designated as a high severity vulnerability due to its authentication bypass nature.
How do I fix CVE-2020-1618?
To fix CVE-2020-1618, you should update to a fixed version of Juniper JUNOS as provided by the vendor's advisory.
What devices are affected by CVE-2020-1618?
CVE-2020-1618 affects various Juniper EX and QFX Series devices running specific versions of Junos OS.
Can CVE-2020-1618 be exploited remotely?
CVE-2020-1618 requires local access to the console port, reducing the likelihood of remote exploitation.
What actions should be taken if CVE-2020-1618 is identified?
If CVE-2020-1618 is identified, immediate action should include patching the firmware and reviewing access logs for unauthorized activity.

agent/weakness
agent/type
agent/references
agent/title
agent/author
agent/severity
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/remedy
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/juniper
canonical/junos os evolved
version/junos os evolved/14.1x53
version/junos os evolved/14.1x53-d10
version/junos os evolved/14.1x53-d15
version/junos os evolved/14.1x53-d16
version/junos os evolved/14.1x53-d25
version/junos os evolved/14.1x53-d26
version/junos os evolved/14.1x53-d27
version/junos os evolved/14.1x53-d30
version/junos os evolved/14.1x53-d35
version/junos os evolved/14.1x53-d40
version/junos os evolved/14.1x53-d42
version/junos os evolved/14.1x53-d43
version/junos os evolved/14.1x53-d44
version/junos os evolved/14.1x53-d45
version/junos os evolved/14.1x53-d48
version/junos os evolved/14.1x53-d50
version/junos os evolved/14.1x53-d51
version/junos os evolved/14.1x53-d52
version/junos os evolved/15.1
version/junos os evolved/15.1-a1
version/junos os evolved/15.1-f
version/junos os evolved/15.1-f1
version/junos os evolved/15.1-f2
version/junos os evolved/15.1-f2-s1
version/junos os evolved/15.1-f2-s2
version/junos os evolved/15.1-f2-s3
version/junos os evolved/15.1-f2-s4
version/junos os evolved/15.1-f3
version/junos os evolved/15.1-f4
version/junos os evolved/15.1-f5
version/junos os evolved/15.1-f5-s7
version/junos os evolved/15.1-f6
version/junos os evolved/15.1-f6-s1
version/junos os evolved/15.1-f6-s12
version/junos os evolved/15.1-f6-s2
version/junos os evolved/15.1-f6-s3
version/junos os evolved/15.1-f6-s4
version/junos os evolved/15.1-f6-s7
version/junos os evolved/15.1-f7
version/junos os evolved/15.1-r1
version/junos os evolved/15.1-r2
version/junos os evolved/15.1-r3
version/junos os evolved/15.1-r4
version/junos os evolved/15.1-r4-s7
version/junos os evolved/15.1-r4-s8
version/junos os evolved/15.1-r4-s9
version/junos os evolved/15.1-r5
version/junos os evolved/15.1-r5-s1
version/junos os evolved/15.1-r5-s5
version/junos os evolved/15.1-r5-s6
version/junos os evolved/15.1-r6
version/junos os evolved/15.1-r6-s1
version/junos os evolved/15.1-r6-s2
version/junos os evolved/15.1-r6-s6
version/junos os evolved/15.1-r7
version/junos os evolved/15.1-r7-s1
version/junos os evolved/15.1-r7-s2
version/junos os evolved/15.1-r7-s3
version/junos os evolved/15.1x53
version/junos os evolved/15.1x53-d10
version/junos os evolved/15.1x53-d20
version/junos os evolved/15.1x53-d21
version/junos os evolved/15.1x53-d210
version/junos os evolved/15.1x53-d230
version/junos os evolved/15.1x53-d231
version/junos os evolved/15.1x53-d232
version/junos os evolved/15.1x53-d233
version/junos os evolved/15.1x53-d234
version/junos os evolved/15.1x53-d235
version/junos os evolved/15.1x53-d236
version/junos os evolved/15.1x53-d237
version/junos os evolved/15.1x53-d25
version/junos os evolved/15.1x53-d30
version/junos os evolved/15.1x53-d31
version/junos os evolved/15.1x53-d32
version/junos os evolved/15.1x53-d33
version/junos os evolved/15.1x53-d34
version/junos os evolved/15.1x53-d40
version/junos os evolved/15.1x53-d45
version/junos os evolved/15.1x53-d47
version/junos os evolved/15.1x53-d470
version/junos os evolved/15.1x53-d48
version/junos os evolved/15.1x53-d495
version/junos os evolved/15.1x53-d50
version/junos os evolved/15.1x53-d51
version/junos os evolved/15.1x53-d52
version/junos os evolved/15.1x53-d55
version/junos os evolved/15.1x53-d56
version/junos os evolved/15.1x53-d57
version/junos os evolved/15.1x53-d58
version/junos os evolved/15.1x53-d59
version/junos os evolved/15.1x53-d590
version/junos os evolved/15.1x53-d591
version/junos os evolved/15.1x53-d592
version/junos os evolved/15.1x53-d60
version/junos os evolved/15.1x53-d61
version/junos os evolved/15.1x53-d62
version/junos os evolved/15.1x53-d63
version/junos os evolved/15.1x53-d64
version/junos os evolved/15.1x53-d65
version/junos os evolved/15.1x53-d66
version/junos os evolved/15.1x53-d67
version/junos os evolved/15.1x53-d68
version/junos os evolved/15.1x53-d69
version/junos os evolved/15.1x53-d70
version/junos os evolved/16.1
version/junos os evolved/16.1-r1
version/junos os evolved/16.1-r2
version/junos os evolved/16.1-r3
version/junos os evolved/16.1-r3-s10
version/junos os evolved/16.1-r3-s11
version/junos os evolved/16.1-r4
version/junos os evolved/16.1-r4-s12
version/junos os evolved/16.1-r4-s2
version/junos os evolved/16.1-r4-s3
version/junos os evolved/16.1-r4-s4
version/junos os evolved/16.1-r4-s6
version/junos os evolved/16.1-r5
version/junos os evolved/16.1-r5-s4
version/junos os evolved/16.1-r6-s1
version/junos os evolved/16.1-r6-s6
version/junos os evolved/16.1-r7
version/junos os evolved/16.1-r7-s2
version/junos os evolved/16.1-r7-s3
version/junos os evolved/17.1
version/junos os evolved/17.1-r1
version/junos os evolved/17.1-r2
version/junos os evolved/17.1-r2-s1
version/junos os evolved/17.1-r2-s10
version/junos os evolved/17.1-r2-s2
version/junos os evolved/17.1-r2-s3
version/junos os evolved/17.1-r2-s4
version/junos os evolved/17.1-r2-s5
version/junos os evolved/17.1-r2-s6
version/junos os evolved/17.1-r2-s7
version/junos os evolved/17.1-r2-s8
version/junos os evolved/17.1-r2-s9
version/junos os evolved/17.1-r3
version/junos os evolved/17.2
version/junos os evolved/17.2-r1
version/junos os evolved/17.2-r1-s1
version/junos os evolved/17.2-r1-s2
version/junos os evolved/17.2-r1-s3
version/junos os evolved/17.2-r1-s4
version/junos os evolved/17.2-r1-s5
version/junos os evolved/17.2-r1-s7
version/junos os evolved/17.2-r1-s8
version/junos os evolved/17.2-r2
version/junos os evolved/17.2-r2-s6
version/junos os evolved/17.2-r2-s7
version/junos os evolved/17.2-r3-s1
version/junos os evolved/17.2-r3-s2
version/junos os evolved/17.3
version/junos os evolved/17.3-r1-s1
version/junos os evolved/17.3-r2
version/junos os evolved/17.3-r2-s1
version/junos os evolved/17.3-r2-s2
version/junos os evolved/17.3-r2-s3
version/junos os evolved/17.3-r2-s4
version/junos os evolved/17.3-r3
version/junos os evolved/17.3-r3-s1
version/junos os evolved/17.3-r3-s2
version/junos os evolved/17.3-r3-s3
version/junos os evolved/17.3-r3-s4
version/junos os evolved/17.3-r3-s5
version/junos os evolved/17.4
version/junos os evolved/17.4-r1
version/junos os evolved/17.4-r1-s1
version/junos os evolved/17.4-r1-s2
version/junos os evolved/17.4-r1-s4
version/junos os evolved/17.4-r1-s5
version/junos os evolved/17.4-r1-s6
version/junos os evolved/17.4-r1-s7
version/junos os evolved/17.4-r2
version/junos os evolved/17.4-r2-s1
version/junos os evolved/17.4-r2-s2
version/junos os evolved/17.4-r2-s3
version/junos os evolved/17.4-r2-s4
version/junos os evolved/17.4-r2-s5
version/junos os evolved/17.4-r2-s6
version/junos os evolved/17.4-r2-s7
version/junos os evolved/17.4-r2-s8
version/junos os evolved/18.1
version/junos os evolved/18.1-r2
version/junos os evolved/18.1-r2-s1
version/junos os evolved/18.1-r2-s2
version/junos os evolved/18.1-r2-s4
version/junos os evolved/18.1-r3
version/junos os evolved/18.1-r3-s1
version/junos os evolved/18.1-r3-s2
version/junos os evolved/18.1-r3-s3
version/junos os evolved/18.1-r3-s4
version/junos os evolved/18.1-r3-s6
version/junos os evolved/18.1-r3-s7
version/junos os evolved/18.2
version/junos os evolved/18.3
version/junos os evolved/18.3-r1
version/junos os evolved/18.3-r1-s1
version/junos os evolved/18.3-r1-s2
version/junos os evolved/18.3-r1-s3
version/junos os evolved/18.3-r1-s4
version/junos os evolved/18.3-r1-s5
version/junos os evolved/18.3-r1-s6
canonical/juniper ex2300-24t
canonical/juniper ex2300-c
canonical/juniper ex3400
canonical/juniper ex4300-24t
canonical/juniper ex4600
canonical/juniper ex4650
canonical/juniper qfx10002-60c
canonical/juniper networks qfx-series
canonical/juniper qfx5100
canonical/juniper qfx5110
canonical/juniper qfx5120
canonical/juniper qfx5200-32c
canonical/juniper qfx5210-64c
canonical/juniper qfx5220