CVE-2020-1654
published 2020-07-17CVE-2020-1654: On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a…
PriorityP261critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.23%
80.8th percentile
On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) Continued processing of this malformed HTTP message may result in an extended Denial of Service (DoS) condition. The offending HTTP message that causes this issue may originate both from the HTTP server or the HTTP client. This issue affects Juniper Networks Junos OS on SRX Series: 18.1 versions prior to 18.1R3-S9 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S1; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3; 19.1 versions prior to 19.1R1-S5, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS prior to 18.1R1.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos_os | — | — |
| juniper | srx_series | — | — |
| juniper_networks | junos_os | >= 18.2 < 18.2R2-S7, 18.2R3-S3 | 18.2R2-S7, 18.2R3-S3 |
| juniper_networks | junos_os | >= 18.3 < 18.3R1-S7, 18.3R2-S4, 18.3R3-S1 | 18.3R1-S7, 18.3R2-S4, 18.3R3-S1 |
| juniper_networks | junos_os | >= 18.4 < 18.4R1-S7, 18.4R2-S4, 18.4R3 | 18.4R1-S7, 18.4R2-S4, 18.4R3 |
| juniper_networks | junos_os | >= 19.1 < 19.1R1-S5, 19.1R2 | 19.1R1-S5, 19.1R2 |
| juniper_networks | junos_os | >= 19.2 < 19.2R1-S2, 19.2R2 | 19.2R1-S2, 19.2R2 |
| juniper_networks | junos_os | >= 19.3 < 19.3R2 | 19.3R2 |
Detection & IOCsextracted from sources · hover to see the quote
- →Trigger condition is processing a malformed HTTP message on SRX Series devices with ICAP redirect service enabled — monitor for anomalous/malformed HTTP traffic traversing SRX devices where ICAP redirect is active ↗
- →The malformed HTTP message may originate from either direction — inspect both HTTP client-to-server and server-to-client traffic for malformed messages on ICAP-enabled SRX devices ↗
- ·Vulnerability only exists when ICAP (Internet Content Adaptation Protocol) redirect service is explicitly enabled on Juniper SRX Series devices — verify ICAP redirect service configuration before applying detection logic ↗
- ·Affected Junos OS versions on SRX Series: 18.1 prior to 18.1R3-S9; 18.2 prior to 18.2R2-S7/18.2R3-S3; 18.3 prior to 18.3R1-S7/18.3R2-S4/18.3R3-S1; 18.4 prior to 18.4R1-S7/18.4R2-S4/18.4R3; 19.1 prior to 19.1R1-S5/19.1R2; 19.2 prior to 19.2R1-S2/19.2R2; 19.3 prior to 19.3R2 ↗
- ·Versions of Junos OS prior to 18.1R1 are NOT affected by this issue ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jwqg-fhhf-42x8: On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead
ghsa_unreviewed·2022-05-24
CVE-2020-1654 [HIGH] GHSA-jwqg-fhhf-42x8: On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead
On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) Continued processing of this malformed HTTP message may result in an extended Denial of Service (DoS) condition. The offending HTTP message that causes this issue may originate both from the HTTP server or the HTTP client. This issue affects Juniper Networks Junos OS on SRX Series: 18.1 versions prior to 18.1R3-S9 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S1; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3; 19.1 versions prior to 19.1R1-S5, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. Th
Juniper
CVE-2020-1654: On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead
vendor_juniper·2020-07-17·CVSS 9.8
CVE-2020-1654 [CRITICAL] CWE-120 CVE-2020-1654: On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead
CVE-2020-1654: On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) Continued processing of this malformed HTTP message may result in an extended Denial of Service (DoS) condition. The offending HTTP message that causes this issue may originate both from the HTTP server or the HTTP client. This issue affects Juniper Networks Junos OS on SRX Series: 18.1 versions prior to 18.1R3-S9 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S1; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3; 19.1 versions prior to 19.1R1-S5, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prio
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-07-17
Published